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A VPN service management system enabh 
rapidly and easily change a VPN service condition, that is, 
a VPN service management system for managing a VPN 
service for a communication network provided with a cus- 
tomer network and a provider network and having a VPN 
service manager for managing a VPN service for a provider 
network and a VPN service agent for managing a VPN 
service for a customer network. The VPN service manager 
changes the VPN service condition in real time in accor- 
dance with an operation status of the customer network in 
cooperation with the VPN service agent. 
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VPN SERVICE MANAGEMENT SYSTEM AND VPN 
SERVICE MANAGER AND VPN SERVICE AGENT 
COMPRISING SAME 

BACKGROUND OF THE INVENTION 
[0001] 1. Field of the Invention 

[0002] The present invention relates to a virtual private 
network (VPN) service management system and to a VPN 
service manager and a VPN service agent comprising that 
system. 

[0003] More particularly, the present invention relates to a 
mode of operation of a VPN service in a case where for 
example an Internet service provider (ISP), an application 
service provider (ASP), or a company having a plurality of 
places of business and operating an extra network among 
these places uses a VPN provided by a type 1 carrier so as 
to advance a widearea promotion of business. Note that, in 
the following explanation, a carrier providing a VPN service 
will be referred to as a "provider", and the ISP, ASP, 
company, etc. utilizing the VPN service will be referred to 
as "customers". Also, networks operated and managed by 
the provider and the customers will be referred to as a 
"provider network" and "customer networks", respectively. 
[0004] 2. Description of the Related Art 
[0005] Along with the various new services appearing one 
after another on the Internet, for example, on-line banking 
and Internet telephone, customers mainly utilizing the Inter- 
net in business have been increasingly calling for a higher 
speed and higher quality communications environment at 
low ' cost. In such a communications environment, it 
becomes indispensable to secure network security. There- 
fore, an IP- VPN capable of utilizing the Internet as a virtual 
dedicated line is now attracting attention. Providers have 
started to provide high quality communication services 
using such IP- VPN's according to their customer needs. 
[0006] When a customer side uses this IP- VPN high 
quality communication service, it designates conditions 
regarding the desired-connecting nodes, guaranteed band- 
width, QoS, policy, data loss (packet loss), delay time, etc. 
at the time of contracting with the provider in advance and 
pays a fixed service usage fee in accordance with the 
contract conditions to the provider side in units of for 
example months. In this case, if desired, the customer side 
can change the contract conditions of the IP- VPN high 
quality communication service (hereinafter also simply 
referred to as a VPN service) from time to time usually with 
some charge. 

[0007] Conventionally, when changing the contract con- 
ditions, (i) the customer or its agent applies for the change 
by means of for example the mail, facsimile, or telephone 
and makes arrangements for ordering the service from the 
provider, then (ii) an operator of the provider sets the VPN 
service conditions necessary for the change. By going 
through such a process, an environment capable of provid- 
ing the intended service to a customer is prepared. 
[0008] Summarizing the problem to be solved by the 
invention,-the procedure for changing the contract condi- 
tions between a customer and a provider conventionally took 
a predetermined period, for example, a few days to a few 
weeks, from application to when the changed service could 



be commenced. For this reason, there was the inconvenience 
that requests for changes of the VPN service usage condi- 
tions occurring sporadically or irregularly at the customer 
side such as in the following examples of use could not be 
dealt with timely: 

[0009] I) Example of use at a company: A president 
of a company wishes to circulate New Year's greet- 
ings or announce a rough medium term plan to all 
members of all places of business at one time via a 
company intranet. 
[0010] 2) Example of use by ISP: The ISP wishes to 
double the bandwidths of its existing VPN's at one 
time for the start of the business of a new service. 

[0011] 3) Example of use by ASP: The ASP wishes to 
prepare for a rush of applications when offering a 
Web ticket sale service, for example, only during a 
period of selling tickets for a popular group. 
[0012] Also, the network management systems of a cus- 
tomer network and a provider network were configured 
completely independent from each other, so there was the 
problem in that the quality conditions or usage conditions of 
a VPN service could not be easily changed to deal with 
sudden changes of the VPN service conditions detected 
inside the customer network, for example, an increase of the 
traffic or amount of communication packets or a deteriora- 
tion of an Internet access response performance. 
[0013] Also, from the standpoint of the provider side, 
while facilities in the provider network for providing the 
VPN service can be investigated for the quality conditions, 
everything from the selection of models to management of 
the customer edge (CE) installed inside the customer net- 
work is entrusted to the customer side, so there was the 
problem in that it becomes difficult to fulfill a service level 
agreement (SLA) concluded at the lime of contracting due to 
for example a later change of the model and specifications 
at the customer edge (CE) side. 

SUMMARY OF THE INVENTION 
[0014] An object of the present invention is to provide a 
VPN service management system for a IP-VPN service etc. 
[0015] 1) capable of rapidly responding to a demand 
on the customer side to change the contract condi- 
tions between the customer and the provider, 
[0016] 2) capable of easily changing the quality con- 
ditions or usage conditions of a IP- VPN service or 
other VPN service, and 
[0017] 3) capable of always fulfiling a service level 
agreement concluded by a contract between the 
customer and the provider. 
[0018] To attain the above object, the present invention 
provides a VPN service management system, for managing 
a VPN service for a communications network provided with 
a customer network (5) and a provider network (4), which 
has a VPN service manager (2) for managing the VPN 
service for the provider network (4) and a VPN service agent 
(3) for managing the VPN service for the customer network 
(5). This VPN service manager (2) changes the VPN service 
conditions in real time in accordance with an operation 
status of the customer network (5) in cooperation with the 
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VPN service agent (3). By this, a VPN service management 
system enabling a customer to rapidly and easily change the 
VPN service conditions is realized. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0019] The above object and features of the present inven- 
tion will be more apparent from the following description of 
the preferred embodiments given with reference to the 
accompanying drawings, wherein: 

[0020] FIG. 1 is a view of the basic configuration of a 
VPN service management system according to the present 
invention; 

[0021] FIG. 2 is a view schematically showing a conven- 
tional typical VPN service network; 
[0022] FIG. 3 is a view schematically showing a VPN 
service network formed by the present invention; 
[0023] FIG. 4 is a view representing the entire VPN 
service management system according to the present inven- 

[0024] FIG. 5 is a view of the basic configuration of a 
VPN service management system 1 according to the present 

[0025] FIG. 6 is a view of the configuration of FIG. S 
using a concrete example; 

[0026] FIG. 7 is a view schematically representing a VPN 
service condition table; 

[0027] FIG. 8 is a view of the functions provided in a VPN 
service manager 2; 

[0028] FIG. 9 is a view of the functions provided in a VPN 
service agent 3; 

[0029] FIG. 10 is a first part of a flow chart for explaining 
a control sequence in FIG. 6; 

[0030] FIG. 11 is a second part of a flow chart for 
explaining the control sequence in FIG. 6; 
[0031] FIG. 12 is a view of an example of application of 
the present invention; 

[0032] FIG. 13 is a view of contents of a VPN service 
condition table 14 used in the example of application of 
FIG. 12; 

[0033] FIG. 14 is a first part of a view of a concrete image 
of the VPN service management system shown in FIG. 
[0034] FIG. 15 is a second part of a view of a concrete 
image of the VPN service management system shown in 
FIG. 

[0035] FIG. 16 is a view of the VPN service management 
system 1 for explaining a second embodiment (full automa- 
tion) according to the present invention; 
[0036] FIG. 17 is a view of the concrete image of the VPN 
service management system 1 shown in FIG. 16; 
[0037] FIG. 18 is a view schematically showing a param- 
eter table 34; 

[0038] FIG. 19 is a view of a series of sequences under the 
second embodiment shown in FIG. 16; 



[0039] FIG. 20 is a view of the VPN service management 
system 1 for explaining a third embodiment (semi-automa- 
tion) according to the present invention; 
[0040] FIG. 21 is a view of a series of sequences under the 
third embodiment shown in FIG. 20; 
[0041] FIG. 22 is a view of the VPN service management 
system 1 for explaining a fourth embodiment (server/client 
type) according to the present invention; 
[0042] FIG. 23 is a view of the concrete image of the VPN 
service management system 1 shown in FIG. 22; 
[0043] FIG. 24 is a view of a series of sequences under the 
fourth embodiment shown in FIG. 22; 
[0044] FIG. 25 is a view of the VPN service management 
system 1 for explaining a fifth embodiment (remote permis- 
sion response type) according to the present invention; 
[0045] FIG. 26 is a view of a series of sequences under the 
fifth embodiment shown in FIG. 25; 
[0046] FIG. 27 is a view schematically representing a 
connection method to an operation manager; 
[0047] FIG. 28 is a view schematically representing 
advance preparations with the operation manager; 
[0048] FIG. 29 is a vie w of the configuration of FIG. 17 
with the sixth embodiment applied thereto; 
[0049] FIG. 30 is a view explaining an in-band means 
according to the present invention; 
[0050] FIG. 31 is a view of a first connection method 
between a customer edge and an agent 3; 
[0051] FIG. 32 is a view of a second connection method 
between the customer edge and the agent 3; and 
[0052] FIG. 33 is a view of an example of the connection 
by the in-band between the manager 2 and the agent 3. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0053] Preferred embodiments of the present invention 
will be described in detail below while referring to the 
attached drawings. 

[0054] FIG. 1 is a view of the basic configuration of the 
VPN service management system according to the present 
invention. 

[0055] In the figure, reference numeral 1 indicates the 
VPN service management system. This is a VPN service 
management system for managing a VPN service for a 
communication network provided with a customer network 
5 for servicing customers and a provider network 4 con- 
structed by the provider for providing the VPN service to the 
customers and connected to the customer network 5. The 
system 1 has at least a VPN service manager 2 for managing 
the VPN service for the provider network 4 and a VPN 
service agent 3 for managing the VPN service for the 
customer network 5. 

[0056] Here, the VPN service manager 2 is configured so 
as to change the VPN service conditions of the VPN service 
to be provided by the system 1 in real time in accordance 
with the operation status of the customer network 5 under 
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the management of the VPN service agent 3 in cooperation 
with the VPN service agent 3. 

[0057] Due to the above configuration, the above-men- 
tioned first problem of the related art that a contract of a 
VPN service cannot be rapidly changed, the second problem 
that the quality conditions or usage conditions of the VPN 
service (VPN service condition) cannot be easily changed, 
and the third problem such that it is difficult to always fulfill 
the service level agreement can be solved. This will be 
explained in detail below. 

[0058] In order to facilitate understanding of the present 
invention, the intention of the present invention will be 
clarified first by explaining the present invention as a whole, 
then components of the present invention will be individu- 
ally explained. 

[0059] FIG. 2 is a view schematically showing a conven- 
tional typical VPN service network. 

[0060] In the figure, reference numeral 6 is a carrier 
network and represents a scope of management of the carrier 
in a general leased line service. 

[0061] This carrier network 6 has a plurality of customer 
networks 5 arranged under it. In the example of the figure, 
customer A networks 1, 2, 3, and 4 in each of which the 
customer A has four nodes are shown. 

[0062] In order to construct the VPN service network 
among these customer networks 5 centered about the carrier 
network 6, an illustrated customer A leased line network is 
formed. This customer A leased line network is formed 
between customers via provider edges (PE's) and provider 
core routers (PCR's) in the carrier network 6 and the 
customer edges (CE's) and the customer routers (CR's) in 
the customer networks 5. Contrary to this, the VPN service 
network of the present invention is constructed as follows. 

[0063] FIG. 3 is a view schematically showing a VPN 
service network formed by the present invention. It shows 
this based on the configuration of FIG. 2. Note that similar 
components are indicated by the same reference numerals or 
symbols throughout all of the figures. 

[0064] When comparing FIG. 2 and FIG. 3, there is a 
difference between the two in the point that the customer 
edge (CE) under the management of each customer network 
5 in FIG. 2 is also placed under the management of the 
carrier network side in FIG. 3. Namely, in the provider 
network 4 of the present invention, the original scope of 
management of the carrier network is extended up to the 
customer side. By this, it becomes possible to control the 
VPN service conditions through the customer edges. On the 
other hand, for this, on the provider side, an illustrated 
provider network management system (P-NMS) 12 becomes 
a useful managing means, while on the customer side, an 
illustrated customer network management system (C-NMS) 
13 becomes a useful managing means. Note that, as little as 
one C-NMS is sufficient for the customer A networks 1, 2, 
3, and 4. 

[0065] According to the VPN service network shown in 
FIG. 3, the business merits shown in following [1] to [3] can 
be expected. 



[0066] First, from the viewpoint of the provider side, 

[0067] [1] A 24-hour monitoring service (outsourc- 
ing) of the customer VPN network including the 
customer edges (CE's) can be realized; 

[0068] [2] Greater uniformity of the VPN service and 
the VPN service conditions thereof can be achieved 
and, as a result, it becomes unnecessary to deal with 
specifications differing for every vender model in the 
customer edges (CE's). 

[0069] Also, from the viewpoint of the vender side, in 
addition to above [1] and [2], 

[0070] [3] one vender can continuously supply cus- 
tomer edges (CE's), provider management system 
(P-NMS) and customer management system 
(C-NMS), unique to the vender, for one provider 
under contract with this provider. 

[0071] A VPN service management system offering the 
business merits shown in the above [1], [2], and [3] will be 
explained next. 

[0072] FIG. 4 is a view of the overall VPN service 
management system according to the present invention. The 
figure shows the system configuration of FIG. 1 mentioned 
above as a reality-based concrete example. 
[0073] In FIG. 4, the VPN service manager 2 shown in 
FIG. 1 is housed in a provider network management center 
7. Also, the center 7 houses the provider network manage- 
ment system (P-NMS) 12 mentioned above. Note that, in the 
figure, as an example, two systems P-NMS1 and P-NMS2 
are shown. This is for considering various business appli- 

[0074] On the other hand, in FIG. 4, the VPN service 
agent 3 shown in FIG. 1 is housed in the customer network 
management center 8. Also, the center 8 houses the above 
mentioned customer network management system (C-NMS) 
13. 

[0075] The VPN service management system 1 according 
to the present invention is constructed by the above com- 
ponents, the provider network 4, and the customer network 
5 working together. 

[0076] The point which must be particularly noted in this 
VPN service management system 1 is that the following 
three requirements <1>, <2> and <3> can be satisfied. These 
three requirements could not be satisfied with the conven- 
tional VPN service. 

[0077] Namely, according to the VPN service manage- 
ment system 1 of the present invention, the following 
requirements are satisfied: 

[0078] <1 > That the VPN service conditions (quality 
conditions or usage conditions of the VPN service) 
provided from the provider side can be instantly 
changed by the customer side (for example, corpo- 
rate user side), 

[0079] <2> That the VPN service conditions can be 
easily changed in accordance with the traffic char- 
acteristics and the usage mode of the VPN in a 
customer network 5 automatically or by designating 
a lime, and 
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[0080] <3> That the settings of the VPN service 
conditions can be controlled by the customer (for 
example corporate user) by using the VPN con- 
tracted with the provider by the customer (by using 
for example an in-band communication mode). 
[0081] Also, by satisfaction of the above three require- 
ments <1 >, <1> and <3>, it becomes possible to meet the 
three customer (for example, corporate user) side demands 
1), 2), and 3) mentioned above. Namely, 

[0082] 1) Example of use at a company: A president 
of a company wishes to circulate New Year's greet- 
ings or announce a rough medium term plan to all 
members of all places of business at one time via a 
company intranet, 
[0083] 2) Example of use by ISP: The ISP wishes to 
double the bandwidths of its existing VPN's at one 
time for the start of the business of a hew service, and 

[0084] 3) Example of use by ASP: The ASP wishes to 
prepare for a rush of applications when offering a 
Web ticket sale service, for example, only during a 
period of selling tickets for a popular group. 

[0085] Referring to FIG. 4 again here, the flows of pro- 
cessing corresponding to the above requirements <1>, <2>, 
and <3> are shown as routes R<1>, R<2>, and R<3> in the 
figure. 

[0086] In the route R<1>, the VPN service manager 2 
provides a VPN service menu to the VPN service agent 3. 
This menu displays the various types of the VPN service 
which can be provided to the customers. 
[0087] Also, in the route R<1>, the VPN service agent 3 
considers the state of use of the VPN's of the customer 
networks 5 under it and refers to the menu to request the 
desired VPN service to the VPN service manager 2. 
[008S] In the route R<2>, the VPN service agent 3 collects 
information concerning the traffic characteristics and the 
usage mode of the VPN's in the subordinate customer 
networks 5 via the C-NMS 13 and generates an illustrated 
VPN service demand in the route R<1>. 
[0089] In the route R<3>, the collected information con- 
cerning the traffic characteristics and usage mode of the 
VPN's is actually reflected at the provider side. Namely, the 
information is transmitted to the provider side. This trans- 
mission is achieved from the C-NMS 13 through the cus- 
tomer edges (CE) by using VPN's in contract under the 
in-band mode. 
[0090] First Embodiment 

[0091] Details of the VPN service management system 1 
satisfying the above requirements <1>, <2>, and <3> will be 
concretely explained next. 

[0092] FIG. 5 is a view of the fundamental configuration 
of the VPN service management system 1 according to the 
present invention. Accordingly, most of the configuration of 
the figure is included in the configuration of FIG. 4. 
[0093] The parts of the configuration which should be 
noted in the figure are as follows. 

[0094] The system 1 further has a provider network man- 
agement system (P-NMS) 12 cooperating with the VPN 



service manager 2 on the provider side. This provider 
network management system 12 manages the provider net- 
work 4 including also the customer edges (CE's) arranged in 
the customer networks 5 for connection with the provider 
network 4. 

[0095] The system 1 may be provided with, at least, the 
provider network management system (P-NMS) 12 in addi- 
tion to the VPN service manager 2 and the VPN service 
agent 3. In order to further impart various functions, how- 
ever, preferably the above mentioned customer network 
management system (C-NMS) 13 is disposed, although it is 
not shown in FIG. 5. Namely, the system 1 further has a 
customer network management system (C-NMS) 13 coop- 
erating with the VPN service agent 3 and managing the 
customer network 5 on the customer side. This customer 
network management system 13 monitors the customer 
edges (CE's) and communicates with the provider network 

[0096] According to the example of FIG. 5, the VPN 
service manager 2 provides the customer A with an IP-VPN 
monitor view for the customer A network as the above 
mentioned VPN service menu. The customer A makes a 
request for the desired IP-VPN service via the VPN service 
agent 3 to the provider side according to this IP-VPN 
monitor view. Note that, in the figure, illustration of other 
customer A networks (refer to FIG. 3) linked with this 
customer A network is omitted. A network configuration 
wherein, if for example the iDustrated customer A network 
is located in Tokyo, the other customer A networks are 
located in Hokkaido, Nagoya, Osaka, Kyushu, etc. is con- 
sidered. The configuration of FIG. 5 will be further con- 
cretely explained next. 

[0097] FIG. 6 is a view of a concrete example of the 
configuration of FIG. 5. 

[0098] The schematic configuration of the figure will be 
explained next. Note that, in the figure, El, E2, E3, . . . 
represent various types of events. These events will be 
explained in detail by referring to FIG. 10 and FIG. 11 
mentioned later. 

[0099] In FIG. 6, P-ip is the provider side IP network of 
the VPN service. C-ipl and C-ip2 are IP networks of the 
customer side of the VPN service and are connected to P-ip. 
This P-ip has connected to a plurality of customer side IP 
networks of the VPN service. Here, a "VPN service" means 
a service based on existing technology wherein a provider 
side IP network relays information among a plurality of 
partial customer IP networks without processing so as to 
realize a single virtual customer IP network overall com- 
prised of the customer IP networks. 
[0100] The customer edges (CE's) are the customer side IP 
apparatuses of the VPN service for connecting the customer 
IP networks of the VPN service and the provider IP network 
of the VPN service. Also, "PE" shows a provider side IP 
apparatus of the VPN service connected to a customer edge 
(CE). 

[0101] The provider network management system 
P-NMS12 is a provider side IP apparatus which monitors 
and controls the IP network. This P-NMS12 monitors and 
controls the operation status of the provider IP apparatus and 
the IP network. 
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[0102] The customer neiwork management system 
C-NMS12 is a customer side IP apparatus which monitors 
and controls the IP network. This C-NMS12 monitors and 
controls the operation status of that customer IP network. 

[0103] Any numbers of these P-NMS12 and C-NMS12 
may be disposed according to the scale of the IP apparatuses 
and IP networks to be managed, the geographic conditions, 
operation conditions, etc.. Here, each C-NMS12 can monitor 
and control a customer edge (CE), while the P-NMS12 can 
monitor and control customer edges (CE) through the 
C-NMS12's or through the provider side IP apparatuses 
(PE). 

[0104] In the present invention, a VPN service manager 2 
able to control the VPN service for the customer edges (CE) 
disposed on the C-ip network is provided in the P-NMS12. 

[0105] Also, a VPN service agent 3 for enabling a cus- 
tomer side VPN service operator to remotely control the 
VPN service manager 2 is provided in each C-NMS12. 

[0106] The VPN service manager 2 and each VPN service 
agent 3 cooperate by the interposition of a VPN service 
condition table between them. This table will be explained 

[0107] FIG. 7 is a view schematically showing the VPN 
service condition table. 

[0108] The VPN service manager 2 provides a service 
menu concerning the VPN service as the VPN service 
condition table 14 in the figure to the VPN service agent 3. 
When there is a request for change of the VPN service 
conditions on the customer side, the VPN service agent 3 
transmits the request for change to the VPN service manager 
2 via that service menu. The VPN service manager 2 then 
reflects the request for change in the provider network 4 via 
the provider network management system 12. 

[0109] For example, this VPN service condition table 14 is 
arranged in the P-ip neiwork or the P-NMS12 of FIG. 6. 
This VPN service condition table 14 holds identifiers of the 
VPN service customers and VPN identifiers allocated to the 
concerned customers, CE identifiers for identifying the 
customer edges CE of the two end points (end point A to end 
point Z) of the VPN and arranged at the target customers, a 
list of VPN service condition items which can be changed by 
the VPN service customers, current values set, at present, in 
correspondence with the items of the VPN service condi- 
tions, and allowable maximum/minimum values allowed as 
the VPN service condition values and setpoint bandwidths 
(bandwidths to be used) thereof. Sometimes items of the 
VPN service conditions and the range of allowable values 
are stipulated in the VPN service contract between the 
customer and the provider, while other times items of the 
VPN service conditions are added or deleted in accordance 
with the situation of the VPN service or the state of the IP 
network. Note that these VPN service condition items some- 
limes differ for different technical specifications for realizing 
the VPN service. Explaining this further, at times of a major 
disaster, it becomes impossible to stipulate a guaranteed 
band. The VPN service condition stipulating the bandwidth 
may be deleted or, conversely, a VPN service condition that 
a leased line such as a wireless or satellite channel be used 
to enable bandwidth to be secured with priority, that is, 
routing through a leased line, can be added. 



[0110] By interposing the VPN service condition table 14 
as described above, the VPN service manager 2 and the VPN 
service agents 3 can cooperate with each other. The means 
(functions) which must be provided in the VPN service 
manager 2 and VPN service agents 3 for this cooperation 
will be explained next. 

[0111] FIG. 8 is a view of the functions provided in the 
VPN service manager 2, while FIG. 9 is a view of the 
function provided in the VPN service agents 3. 
[0112] Referring to FIG. 8, the VPN service manager 2 is 
provided with 

[0113] a VPN service order control means 21 for 
receiving an order when an order for changing the 
VPN service conditions (FIG. 7) is generated from 
a VPN service agent 3 and outputting the changed 
VPN service conditions concerned in that order, 

[0114] a VPN service condition retrieval means 22 
for retrieving the present VPN service conditions 
given to the concerned customer network 5 from the 
VPN service condition table (FIG. 7) when that 
order is generated, 

[0115] a VPN service condition decision means 23 
for deciding whether or not the range by which the 
changed VPN service conditions exceed the present 
VPN service conditions is within an allowable range, 

[0116] a VPN service condition setting means 24 for 
resetting the present VPN service conditions to the 
changed VPN service conditions when the result of 
said decision is "POSSIBLE", and 

[0117] a customer edge control means 25 for control- 
ling the customer edge (CE) based on the reset VPN 
service conditions. 
[0118] By this means 25, the provider side VPN service 
operator becomes able to control the VPN service at the 
customer edge (CE). 

[0119] Further supplementing the explanation, the VPN 
service order control means 21 receives an order for chang- 
ing the VPN service conditions (VPN service order) from a 
VPN service agent 3. Based on the customer identifier and 
the VPN identifier contained in the concerned order, indi- 
vidual VPN service conditions and values similarly con- 
tained in the concerned order are transferred to the VPN 
service condition decision means 23. 
[0120] When the result of decision by the service condi- 
tion decision means 23 is "POSSIBLE", the VPN service 
condition setting means 24 is used to change the present 
values of the VPN service condition table 14. 
[0121] Thereafter, the VPN service conditions and values 
are converted to control information corresponding to the 
customer edge (CE), then the control information is trans- 
mitted to the CE control means 25. Further, based on the 
result of decision by the VPN service condition decision 
means 23 and the result of the control by the CE control 
means 25, the result is sent back to the VPN service agent 
3. 

[0122] The VPN service condition retrieval means 22 
extracts the contents of the VPN service condition table 14 
for the customer identifier and the VPN identifier. 
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[0123] The VPN service condition decision means 23 
confirms for each of the individual VPN service conditions 
and values thereof contained in the VPN service condition 
change order whether or not the VPN service condition table 
14 has the corresponding VPN service condition and 
whether or not the corresponding value is within the allow- 
able values based on the customer identifier and VPN 
identifier. 

[0124] The VPN service condition setting means 24 sets 
the values contained in the VPN service order as the present 
values for the individual VPN service condition items based 
on the customer identifier and the VPN identifier. 
[0125] Referring to FIG. 9 next, each VPN service agent 
3 is provided with 

[0126] a VPN service condition retrieval means 31 
for retrieving the current VPN service conditions 
given to a concerned customer network 5 from the 
VPN service condition table (FIG. 7) when an order 
for changing the VPN service conditions is generated 
from a customer and 
[0127] a VPN service order issuing means 32 for 
issuing (he order to the VPN service manager 2 based 
on the retrieved VPN service conditions. 
[0128] Also, the VPN service agent 3 is provided with a 
customer edge control means 33 for controlling the customer 
edge (CE) based on the VPN service conditions reset by the 
VPN service manager 2 upon receipt of the order when the 
VPN service manager 2 controls the customer edge (CE) 
through the VPN service agent 3. 

[0129] Note that a group of functions for collecting IP 
network information for issuing a change of VPN service 
conditions (VPN service order) such as monitoring for faults 
and monitoring traffic of the C-ip network (FIG. 6) is 
arranged in the C-NMS12. 

[0130] Further supplementing the explanation, the VPN 
service order issuing means 32 issues an order for changing 
the values of the individual VPN service conditions to the 
VPN service manager 3 based on the IP network information 
obtained from the C-NMS12. 

[0131] The customer edge control means 33 controls the 
functions relating to the VPN service provided in the cus- 
tomer edge (CE). 

[0132] Returning to FIG. 6 again, the above mentioned 
events El, E2, E 3, . . . will be explained in the form of a 
control sequence based on the explanation given with ref- 
erence to FIG. 7, FIG. 8, and FIG. 9. 
[0133] FIG. 10 and FIG. 11 are parts of a flow chart for 
explaining the control sequence in FIG. 6. 
[0134] First, the correspondence between the steps (Sll to 
S19 ) of FIG. 10 and FIG. 11 and the events (El to E5) of 
FIG. 6 becomes as follows: 

[0135] El: Sll, S12, and S13 

[0136] E2:S14 

[0137] E3: S15, S16, and S17 

[0138] E4: S18 

[0139] E5:S19 



[0140] Steps Sll to S19 are as follows. 

[0141] Step Sll: The VPN service manager of the C-ip 

network judges the change of the VPN service conditions 

from the C-ip network information of the C-NMS12 and the 

predetermined network operation schedule. 

£0142] Step S12: The VPN service condition retrieval 

means 31 of the VPN service agent 3 acquires the VPN 

service conditions of the concerned customer. 

[0143] Step S13: The VPN service manager of the C-ip 

network issues a VPN service order to the VPN service 

[0144] Step S14: The VPN service order issuing means 32 
of the VPN service agent 3 transmits the VPN service order 
to the VPN service manager 2. 

[0145] Step S15: The VPN service order control means 21 
of the VPN service manager 2 issues the VPN service order 
to the VPN service condition decision means 23. 
[0146] Step S16: It is decided whether the result of the 
decision is "POSSIBLE" (OK) or "IMPOSSIBLE" (NG). 
[0147] Step S17: The CE control means 25 of the VPN 
service manager 2 controls the customer edge (CE) based on 
the VPN service order. 

[0148] Step SIS: The- VPN service manager 2 sends back 
the result of the VPN service order to the VPN service agent 
3. 

[0149] Step S19: The VPN service manager 2 notifies the 
result of the VPN service order to the adjoining VPN service 
agent 3. 

[0150] By the above configurations (FIG. 7, FIG. 8, and 
FIG. 9) and the control sequences (FIG. 10 and FIG. 11), 
(he VPN service operator of the customer side IP network 
becomes able to change the VPN service conditions freely 
and dynamically without going through the VPN service 
operator of the provider side IP network. This means that the 
VPN service operator of the VPN service customer side can 
efficiently operate the customer IP network on a timely basis 
based on (he usage situation and predictions of the virtual 
customer IP network as a whole. 

[0151] FIG. 12 is a view of an example of application of 
the present invention, while FIG. 13 is a view of the 
contents of the VPN service condition (able 14 used in the 
example of application of FIG. 12. 
[0152] Note that FIG. 12 should be viewed in substan- 
tially the same way as FIG. 6, and FIG. 13 is a detailed 
example of the VPN service condition table 14 shown in 
FIG. 7. The table 14 is formed in the database (DB) 15 of 
FIG. 12. 

[0153] An example of application of the present invention 
will be explained by referring to FIG. 12 and FIG. 13. 
[0154] A certain customer, that is, a company ci offering a 
Web ticket sale service, has two customer IP networks dpi 
and cip2 monitored and controlled by a single customer 
network management system C-NMS12. A VPN service is 
provided between the cipl and cip2 by the provider IP 
network P-ip. 

[0155] At this time, the customer edges are CE1 and CE2, 
the provider edges are PE1 and PE2, and the provided VPN 
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is a VPNci reaching CE2 from CE1 via PE1 and PE2. Also, 
an example is shown wherein the database (DB) 15 for 
storing the VPN service condition table 14 is disposed in the 
P-NMS12. 

[0156] As the VPN service condition with respect to this 
VPNci provided to the company ci, the bandwidth of the 
VPN service can be freely changed. The current value of that 
bandwidth, maximum value, minimum value, and the set- 
point bandwidth are bw-i, bw-max, bw-min, and bwA (bw: 
bandwidth) as shown in FIG. 13. The customer identifier 
and VPN identifier of the company ci in this case are ci-id 
and VPNci-id, while the CE identifiers of the two end points 
(A, Z) of the VPNci, that is, CE1 and CE2, are CEl-id and 
CE2-id. 

[0157] Note that, in order to realize the VPN service, other 
than what is described above, there is a lower rank network 
technology for realizing VPN links between CE1 and PE1, 
between PE1 and PE2, and between PE2 and CE2 and VPN. 
[0158] Here, during the ticket sale period, orders from 
persons who desire to purchase tickets rush in. Therefore, 
the amount of accesses to the VPNci (that is, between cipl 
and cip2) suddenly increases. For this reason, the VPN 
service conditions will be rapidly changed. The control in 
this case becomes as follows. 

[0159] 1. The VPN service manager of the VPNci 
decides that a change of the VPN service bandwidth 
is necessary at the start of the ticket sales. 
[0160] 2. The VPN service manager acquires the 
VPN service conditions (VPN service bandwidth) of 
the VPNci from the database (DB) 15 by the VPN 
service condition retrieval means 31 of the VPN 
service agent (VPNa) 3 and determines that the 
bandwidth bw should be increased by exactly bw'. 
[0161] 3. The VPN service manager issues an order 
for changing the VPN service bandwidth corre- 
sponding to the customer identifier ci and the VPN 
identifier VPNci-id from bw to bw' to the service 
agent (VPNa) 3. 
[0162] 4. The VPN service order issuing means 32 of 
that service agent VPNa transmits that order to the 
VPN service manager (VPNm) 2. 
[0163] 5 . The VPN service order control means 21 of 
this service manager VPNm issues the concerned 
order to the VPN service condition decision means 
23. 

[0164] 6. This VPN service condition decision means 
23 evaluates whether or not the changed bandwidth 
bw' contained in that order satisfies the following 
conditions with respect to bw-max and bw-min in the 
database 15. 



[0165] . The VPN service condition decision means 23 
returns the result of the decision "OK" for that order if the 
above conditions are satisfied, but will return the result of 
the decision "NG" if the above conditions are not satisfied 
(step S16 of FIG. 7). 

[0166] 7. When the result of the decision received 
from the VPN service condition decision means 23 is 



"OK", the VPN service order control means 21 
issues the concerned order to the VPN service con- 
dition setting means 24, but when the result of the 
decision received from the VPN service condition 
decision means 23 is "NG", it responds that the order 
has failed to the agent VPNa and the present control 
is terminated. 

[0167] 8. The VPN service condition setting means 
24 changes the present value of the VPN service 
bandwidth as the service condition imparled to 
VPNci from bw to bw 1 . 
[0168] 9. Further, the VPN service order control 
means 21 controls CE1 and CE2 to change bw to bw" 
by using the CE control means 25 when the result of 
the decision at the above 7. is "OK". 
[0169] 10. The VPN service order control means 21 
returns the result of control of the CE1 and CE2 at 
the above 9. as a response to the agent VPNa. 
[0170] 11. At the end of the ticket sale, control is 
performed so that the order becomes bw at the above 
2. to 10. to change the VPN service bandwidth from 
bw' lo the original bw again. 
[0171] Due to the above, during the ticket sale period by 
the company ci, it is possible to increase the VPN service 
bandwidth of the VPNci so as to deal with the rush in access 
by persons who desire to purchase tickets. 
[0172] A concrete image of the system shown in FIG. 1 
will be shown next supplementarily by using the figures. 
FIG. 14 and FIG. 15 are parts of a view of a concrete image 
of the VPN service management system shown in FIG. 1. 
[0173] In FIG. 14, the right side (provider side) and left 
side (customer side) show the VPN service manager 2 and 
a VPN service agent 3 of the VPN service management 
system 1. 

[0174] As the main function of the VPN service manager 
2, the VPN service order control function (refer to means 21 
of FIG. 8) is shown. As the original operation for achieving 
this function, the VPN service manager 2 performs the 
illustrated policy control, QoS (Quality of Service) manage- 
ment, stock management, etc. '"Stock management" means 
so-called "resource management" for deciding whether or 
not a demand for increase can be accepted when receiving 
a demand to suddenly increase the bandwidth, for example, 
to 100 Mbps from a customer operating with a bandwidth of 
10 Mbps at present. 

[0175] Also, the provider network management system 
(P-NMS) 12cooperating with that VPN service manager 2 
has at least the illustrated units for management of faults (a), 
configuration (b), performance (c), and security (d). The 
VPN service manager 2 controls network elements (NE) 
such as the PE's, CE's, and PCR's in the subordinate 
provider network 4 via the NE communication control unit 
26 and corresponding ports under the operating system (OS) 
in the system (P-NMS) 12 based on the management data by 
these management units a lo d. 

[0176] The fault management unit a watches constantly 
faults occurring in the provider network 4. 
[0177] The configuration management unit b watches con- 
stantly what kind of network elements (NE) the provider 
network 4 is configured by. 
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[0178] The performance management unit c constantly 
monitors the traffic information and amount of generation of 
packet loss in the network elements. 

[0179] Also, the security management unit d makes secu- 
rity checks by passwords and authentication. 

[0180] On the other hand, the main functions of the VPN 
service agent 3 provided at the left side (customer side) of 
FIG. 14 are shown as a function of monitoring the traffic of 
the customer edge (CE), a function of controlling requests 
for quality of VPN service, and a function of monitoring 
faults at the customer VPN. The customer edge CE is 
monitored via the corresponding port under the operating 
system (OS). 

[0181] The processing in the VPN service management 
system 1 shown in FIG. 14 may be roughly classified to 
following processing (1), (2), and (3). Note that, (1), (2), and 
(3) are shown also in FIG. 14. 

[0182] (1) For example, when the president of a 
company, that is, the customer A, wishes to broadcast 
a management plan to all employees at all places of 
business of the company all together through the 
customer A networks 1, 2, 3, and 4 of FIG. 3, the 
concerned VPN service agent 3 requests a change of 
the customer VPN service conditions at the VPN 
service manager 2. That is, it requests a temporary 
increase of the bandwidth (bw). 

[0183] (2) The VPN service manager 2 receiving that 
request requests a change of the VPN service con- 
ditions at the subordinate provider network manage- 
ment system (P-NMS) 12. 

[0184] (3) The provider network management system 
12 receiving that request sends a command indicat- 
ing that "the VPN service conditions be changed" to 
the network elements (NE) in the subordinate pro- 
vider network 4. 

[0185] Next, refer to FIG. 15. The figure shows a more 
realistic image of the configuration of FIG. 14. 

[0186] In FIG. 15, the VPN service agent 3 is shown as 
having the function of issuing a VPN service order (refer to 
the means 32 of FIG. 9) and a function of retrieving the 
VPN service conditions (refer to the means 31 of FIG. 9). 

[0187] e shown at the top left of the figure is the VPN 
service quality demand menu. This menu e is the menu for 
specifying the service for which provision is sought from the 
customer side from the list of services which can be pro- 
vided by the manager 2 presented from the VPN service 
manager 2 and returning it to the manager 2. 
[0188] Further, g is the CE traffic view for checking the 
change in traffic over time at the customer edge (CE) on the 
customer side. By referring to this traffic view g, the 
operation manager of the customer side can determine the 
present situation of the used bandwidth. 
[0189] Also, f is a view for visually displaying the VPN of 
the customer to the operation manager as topology. This 
view f is in practice the VPN fault monitor view utilized for 
monitoring faults of the VPN. 



[0190] Second Embodiment 

[0191] Next, an explanation will be made of full automa- 
tion of VPN service management in the VPN service man- 
agement system 1 according to the present invention. 
[0192] FIG. 16 is a view of the VPN service management 
system 1 for explaining a second embodiment (full automa- 
tion) according to the present invention. 
[0193] Note that most of the figure is the same as FIG. 5. 
The difference resides in that the customer network man- 
agement center (C-NMS) 13 is clearly shown in the cus- 
tomer management center 8. This is for showing that the full 
automation is achieved by the cooperation of the C-NMS 12 
and the P-NMS12. 

[0194] The point of the second embodiment resides in the 
following configuration. Namely, the customer network 
management system (C-NMS) 13 monitors the operation 
status of the customer network 5 and changes the VPN 
service conditions by full automation without interposition 
of an operator through the cooperation of the VPN service 
agent 3 and both the VPN service manager 2 and the 
provider network management system (P-NMS) 12 in accor- 
dance with the monitoring result. 

[0195] More concretely, the VPN service agent 3 has a 
parameter table for pre-setting and holding changed condi- 
tion data to be referred to when changing the VPN service 
conditions. Further, the customer network management sys- 
tem 13 is comprised so as to transmit the changed VPN 
service conditions determined by referring to the parameter 
table to the VPN service manager when deciding that the 
VPN service conditions should be changed due to the 
monitoring result. 

[0196] FIG. 17 shows a concrete image of the VPN 
service management system 1 shown in FIG. 16. 
[0197] Most of the figure is the same as FIG. 14. The 
difference resides in that the parameter table is shown as 
reference numeral 34, and the VPN service change decision 
unit 35 referring to the parameter table 34 is shown. The 
operation is roughly indicated by (1), (2), (3), and (4) in the 
figure. 

[0198] (1) The C-NMS12 first collects the data of the 
traffic and the service quality of the customer net- 
work 5. 

[0199] (2) On the other hand, the C-NMS12 retrieves 
the VPN service conditions given to the concerned 
customer by referring to the parameter table 34. 

[0200] (3) The data collected in the above (1) is 
compared with the threshold values stored in the 
parameter table 34. When detecting that the data 
exceeds any threshold value, an alarm indicating that 
a threshold value is exceeded is notified to the VPN 
service change decision unit 35. This is the function 
of issuing a service order (means 32 of FIG. 9). 

[0201] (4) When receiving the notification, the VPN 
service change decision unit 35 refers to the param- 
eter table 34 and transfers the request for change to 
the VPN service quality capable of covering the 
amount by which from threshold value is exceeded 
to the VPN service manager 2 automatically without 
the interposition of an operator. 
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[0202] Then the VPN service manager 2 controls the 
network elements (NE) in the provider network 4 so as to 
meet that request. 

[0203] Concretely summarizing the above, the C-NMS12 
manages the conditions concerning the operation status of 
the customer network 5, for example, the frequency of 
access through the Internet to the customer network 5 and 
the rate of flow of traffic to the customer edge (CE). The 
VPN service agent 3 holds the type of the threshold value, 
degree of increase, etc. when these conditions exceed a 
certain threshold value and the VPN service parameter 
change conditions in the parameter table 34 as the VPN 
parameters. 

[0204] When the C-NMS12 detects that a threshold value 
of the operation conditions of the customer network 5 has 
been exceeded, the VPN service agent 3 refers to the 
parameter table 34, then reflects the changed conditions 
found into the provider network 4 by the VPN service 
manager 2 and the P-NMS12. Due to this, it is possible to 
immediately meet the VPN service conditions in accordance 
with the operation status of the customer network 5 without 
the interposition of the operation manager of the customer 
network 5 and the operation manager of the provider net- 
work 4. Here, the parameter table will be simply explained. 
[0205] FIG. 18 is a view schematically showing the 
parameter table 34. 

[0206] The content of the table of the top part of the figure 
is the same as the content of the table 14 shown at the top 
part of FIG. 7 mentioned above. The VPN service change 
decision unit 35 decides to change the content of table 34 of 
the top part of the figure as for example shown in the bottom 
part of the figure. There are.a plurality of levels of decision. 

[0207] Level 1 is for when assuming the current value is 
the value of the "Best Effort" and changes that value to a 
20% increase. 

[0208] Level 2 is for when the current value is the value 
of the 20% increase and changes that value to a 50% 

[0209] Level 3 is for when the current value is the value 
of the 50% increase and changes that value to a 100% 
increase. That is, the higher the level, the broader the 
changed bandwidth. 

[0210] Next, the operation under the above mentioned 
second embodiment will be explained. 
[0211] FIG. 19 is a view of a series of sequences under the 
second, embodiment shown in FIG. 16. 
[0212] Assume now that the company receiving the pro- 
vision of the VPN service suddenly experiences congestion 
of its network in a certain time band. For this reason, that 
company desires to rapidly change the VPN service condi- 
tions. The change is performed automatically by the follow- 
ing procedure. 

[0213] (1) When the C-NMS12 on the customer side 
judges that the threshold value has been exceeded, 
the VPN service agent 3 sends an alarm indicating 
that the traffic threshold value has been exceeded ((1) 
in the figure). 



[0214] The VPN service change decision unit 35 judges 
that the threshold value of the C-NMS has been exceeded. 
The judgment logic is installed in the decision unit 35 in 
advance. The contents thereof are for example as follows. 

TABLE 1 



Level Packet loss Traffic threshold 

Level 1 One fault message Threshold 90%: S times 

Level 2 Five fault messages Threshold 90%: 30 times 



[0215] (2) The VPN service agent 3 refers to the 
parameter table 34 ((2) in the figure). Then, it com- 
pares this with the present service under that param- 
eter and selects the optimal level of the VPN service 
conditions. 

[0216] (3) When a new VPN service condition is 
selected, the VPN service agent 3 automatically 
requests a change to the new VPN service to the 
VPN service manager 2 ((3) in the figure). 
[0217] (4) The VPN service manager 2 receiving the 
notification of the request reads the current usage 
bandwidth of the customer and judges whether or not 
the request for change is possible ((4) in the figure). 
[0218] If the change is impossible, the VPN service man- 
ager 2 notifies that it is "IMPOSSIBLE" to the VPN service 
agent 3 of the customer. 

[0219] (5) Conversely, when the request for change is 
"POSSIBLE", the change of service is notified as a 
command for change of settings of the network 
elements to the P-NMS12 ((5) in the figure). 
[0220] (6) The P-NMS12 issues a command for 
change of settings of the network elements, for 
example, a policy setting, to the network elements 
(NE) on the provider side according to the conditions 
indicated in the parameter table 34. By this, the VPN 
service contents of the company side are changed. 
According to this example, the bandwidth of the 
network becomes broader, so the congestion and the 
packet loss are automatically solved and suppressed 
((6) in the figure). 
[0221] (7) When the settings of the network elements 
(NE) are successfully changed, the success is noti- 
fied to the P-NMS12 ((7) in the figure). 
[0222] (8) When succeeding in changing to the new 
service by the above description, the P-NMS12 
sends a reply to this effect to the VPN service 
manager 2 ((8) in the figure). 
[0223] (9) The VPN service manager 2 notifies the 
change to the VPN service agent 3 on the customer 
side by utilizing the concerned VPN service ((9) in 
the figure). 

[0224] (10) When the change to new service is noti- 
fied, the VPN service agent 3 records the parameters 
of the present service in the database (database for 
storing the parameter table 34) ((10) in the figure). 
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[0225] As described above, by increasing the VPN service 
bandwidth for a certain period, congestion of the network 
can be automatically dealt with. 
[0226] Third Embodiment 

[0227] Next, an explanation will be made of semi-auto- 
mation of VPN service management in the VPN service 
management system according to the present invention. 
[0228] FIG. 20 is a view of the VPN service management 
system 1 for explaining a third embodiment (semi-automa- 
tion) according to the present invention. 
[0229] Note that most of the figure is the same as FIG. 16. 
The difference resides in that a client terminal 41 placed 
inside the customer management center 8 and a remote 
client terminal 42 located at a remote place are shown and 
that an operation status change notifying means 43 is shown. 
Note that, the client terminals 41 and 42 will also be referred 
to overall as an operation manager (40). 
[0230] The point of the third embodiment resides in the 
following configuration. Namely, an operation status change 
notifying means 43 is provided in the VPN service agent 3, 
when, the customer network management system (C-NMS) 
13 monitors the operation status of the customer network 5 
and decides that the VPN service conditions should be 
changed by the monitor result, for notifying the decision to 
the operation manager 40 of the customer network 5, and 
this VPN service agent 3 semi-automatically changes the 
VPN service conditions through cooperation of the VPN 
service manager 2 and the provider network management 
system (P-NMS) 12 when receiving a reply giving permis- 
sion with respect to the notification. 
[0231] Further concretely, the VPN service agent 3 has a 
parameter table 34 (refer to FIG. 17) for pre-setting and 
holding the changed condition data to be referred to when 
changing the VPN service conditions. When the customer 
network management system (C-NMS) 13 judges by the 
monitoring result that the VPN service conditions should be 
changed, the changed VPN service conditions determined 
by referring to the parameter table 34 are input to the 
operation status change notifying means 43. 
[0232] Note that the view of the concrete image of the 
VPN service management system 1 based on the third 
embodiment is almost the same as the above mentioned 
FIG. 17, so is omitted, but the concrete image of the system 
1 may be summarized as follows. 

[0233] The VPN service agent 3 has an operation status 
change notifying means 43 for notifying the above men- 
tioned type of threshold value, degree of increase, etc. and 
the conditions for change of the VPN service parameters 
together with the VPN parameter table 34 (refer to FIG. 18) 
to the operation manager 40 of the customer network 5. 
[0234] When the C-NMS12 detects that a threshold value 
of the operation conditions of the customer network 5 has 
been exceeded, the VPN service agent 3 refers to the 
parameter table 34, then notifies the fact that it has been 
exceeded to the operation manager 40. Then, the judgment 
of the operation manager 40 is reflected in the provider 
network 4 by using the VPN service manager 2 and the 
P-NMS12. By this, VPN service conditions in accordance 
with the operation status of the customer network 5 can be 



promptly met under the judgment of the operation manager 
4 without the interposition of the operator of the provider 
network 4. 

[0235] FIG. 21 is a view of a series of sequences under the 
third embodiment shown in FIG. 20. 
[0236] The figure is similar to the sequence diagram of 
FIG. 19. Processes similar to each other are indicated by the 
same numerals in parentheses. 

[0237] When assuming that a company receiving provi- 
sion of a VPN service suddenly experiences congestion of 
the network in a certain time band, the following processes 
(1), (2), ... are proceeded with in the following sequence. 
Note that (11), (12), etc. are processes distinctive to the third 
embodiment. 

[0238] (1) Same as (1) of FIG- 19. 

[0239] (2) Same as (2) of FIG. 19. 

[0240] (11) The service level (refer to the bottom part 
of FIG. 18) selected by the VPN service agent 3 is 
notified to the operation manager 4 ((11) in the 

[0241] (12) The operation manager 40 judges 
whether or not this new service level is to be applied 
to the concerned company and sends back the result 
of judgment to the VPN service agent 3 ((12) in the 
figure). 

[0242] (3) The VPN service agent 3 notified of the 
result of judgment for the request of change auto- 
matically requests the result, as the new VPN service 
change demand, to the VPN service manager 2. 

[0243] (4) to (9) are same as (4) to (9) of FIG. 19. 

[0244] (13) The setting of the VPN service conditions 
was changed by the above, so this is reflected in the 
C-NMS12. In the case of semi-automation, unlike 
the case of full automation mentioned above, the 
final result cannot be confirmed by the C-NMS12, so 
this process (13) is necessary. 

[0245] As described above, by increasing the VPN service 
bandwidth for a certain period, congestion of the network 
can be semi-automatically handled. 
[0246] As mentioned above, in a semi-automation VPN 
service, when notified that a threshold value has been 
exceeded or is predicted to be exceeded based on the 
parameter table 34 set in advance, the VPN service change 
decision unit 35 (refer to FIG. 17) refers to the service 
conditions of the parameter table 34 and automatically 
decide what kind of service should be selected. At this time, 
that decision is input to the notifying means 43. Based on the 
concerned input, the operation manager 40 (operator) finally 
reconfirms the result of the decision by the service change 
decision unit 35. When there is no problem in the change of 
the service content, the operator requests the change of the 
service content to (he VPN service manager 2 of the provider 
network 4. 

[0247] Thus, the VPN service conditions in accordance 
with the operation status of the customer network 5 can be 
promptly met without the interposition of the operation 
manager of the provider network 4. 
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[0248] Fourth Embodiment 

[0249] Next, an explanation will be made of server/client 
type management in the VPN service management system 1 
according to the present invention. 

[0250] FIG. 22 is a view of the VPN service management 
system 1 for explaining the fourth embodiment (server/client 
type) according to the present invention. 
[0251] Note, most of the figure is the same as FIG. 20. The 
difference resides in that the operation status change noti- 
fying means 43 is realized by a server/client mode. 
[0252] The point of the fourth embodiment resides in the 
following configuration. Namely, when the VPN service 
agent 3 and the customer network management system 
(P-NMS) 13 cooperate in a server/client mode, the remote 
client terminal 42 attached to the operation manager 40 is 
introduced as another one of the concerned clients. Further, 
the VPN service agent 3 and the remote client terminal 42 
cooperate in a server/client mode to realize the operation 
status change notifying means 43. 

[0253] The VPN service agent 3 and the remote client 
terminal 42 are more preferably connected by a leased line 
or in-band. 

[0254] FIG. 23 is a view of a concrete image of the VPN 
service management system 1 shown in FIG. 22. 
[0255] Most of the figure is the same as FIG. 17. The 
difference resides in that the operation status change noti- 
fying means 43 mentioned above is shown as the VPN 
service change notification unit 44. Also, among (1), (2), (3), 
and (4) representing operations, the operation (3) is differ- 
ent. In the fourth embodiment, in this (3), the VPN service 
change notification unit 44 receives a notification of a 
change of the VPN service parameters from the C-NMS12 

[0256] Summarizing the configurations of FIG. 22 and 
FIG. 23, the operation status change notifying means 43 can 
be realized as an alarm displaying means on the operation 
terminals (41, 42) operated with the C-NMS12 and the VPN 
service agent 3. There is a terminal at a place other than the 
customer network management center 8. This is connected 
to the VPN service agent 3 as the remote client terminal 42. 
[0257] In the case of remote operation, the operation 
manager terminals (41, 42) and the VPN service agent 3 
operate in a server and client relationship and are connected 
to each other by a corporate LAN or in-band. 
[0258] FIG. 24 is a view of the series of sequences under 
the fourth embodiment shown in FIG. 22. 
[0259] The figure is almost the same as the sequence 
diagram of FIG. 21. Similar processes are indicated by the 
same numerals in parentheses. The particularly different 
point resides in that the VPN service agent 3 and the 
terminals (41, 42) of the operation manager 40 are repre- 
sented in a server/client mode in the top part of FIG. 24. 
[0260] Accordingly, the processes (1) to (13) of the figure 
are the same as the processes (1) to (13) of FIG. 21, but this 
is different from the third embodiment in the point of the 
VPN service by remote operation. 

[0261] In this VPN service, the person responsible for the 
operation of the customer network 5 (president, operator, 



etc.) can ask for a request for change of service to the 
provider side by the remote client 42 from time to time. The 
remote client 42 is connected to the service agent 3 of the 
customer network 5 and determines the service conditions in 
the parameter table 34 by the judgment of the person 
responsible for operation of the customer network 4. Based 
on the result, Ibe service agent 3 side requests the service 
contents to the VPN service manager 2 of the provider 
network 4. The remote client 42 is connected to the service 
agent 3 of the customer network 5 by a leased line or 
in-band, so there is no problem in security. 
[0262] Also, by the remote operation, the operation man- 
ager 40 can manage the VPN not only at a fixed location, but 
also at a remote location. As described above, by increasing 
the VPN service bandwidth for a certain period, congestion 
of the network can be dealt with by remote operation. 
[0263] Fifth Embodiment 

[0264] Next, an explanation will be made of remote per- 
mission response type of management in the VPN service 
management system 1 according to the present invention. 
[0265] FIG. 25 is a view of the VPN service management 
system 1 for explaining the fifth embodiment (remote per- 
mission response type) according to the present invention. 
[0266] Note that most of the figure is the same as FIG. 16 
mentioned above. The difference resides in that, as an 
example, a radio area network (RAN) 51 and a mobile 
terminal 52 are shown. 

[0267] The point of the fifth embodiment resides in the 
following configuration. Namely, an operation status change 
confirming means 53 is provided in the VPN service man- 
ager 2 side, when the customer network management system 
(C-NMS) 13 monitors the operation status of the customer 
network 5, for requesting confirmation to the customer, that 
is, the remote operation manager 40, upon receipt of a 
request to the VPN service manager 2 for automatically 
changing of the VPN service conditions in accordance with 
the monitoring result, and the VPN service manager 2 
changes the VPN service conditions when obtaining a reply 
of permission with respect to the notification. 
[0268] More concretely, the operation status change con- 
firming means 53 is realized by the VPN service manager 2 
and the mobile terminal 52 wirelessly connected to the 
provider network. 

[0269] In this case, as mentioned above, the VPN service 
agent 3 has a parameter table 34 for pre-setting and holding 
the changed condition data which should be referred to when 
changing the VPN service condition. The customer network 
management system 13 transmits the changed VPN service 
conditions determined by referring to the parameter table 34 
to the VPN service manager 2 when judging that the VPN 
service condition should be changed according to the moni- 
toring result. 

[0270] FIG. 26 is a view of a series of sequences under the 
fifth embodiment shown in FIG. 25. 
[0271] The figure is similar to the sequence diagram of 
FIG. 21. Similar processes are indicated by the same 
numerals in parentheses. The particular difference resides in 
thai the mobile terminal 52 and the operation status con- 
firming means 53 are represented at the top part of FIG, 26. 
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Also, when looking al (he process, the notification process 
(11) of FIG. 21 becomes the notification process (21) 
extended to the VPN service manager 2 in FIG. 26, the 
process (22) for confirmation of a request for change made 
via the process (21) is added to the operation manager 
(mobile terminal) 52, and the process (23) for returning a 
reply for permission obtained by that confirmation from the 
mobile terminal 52 to the manager 2 is added. 
[0272] Summarizing the configurations of FIG. 25 and 
FIG. 26, in the VPN service, the operation status change 
confirming means 53 is made able to use the Internet mail or 
the portable telephone (52) to change the VPN service 
conditions from a location other than the operation manage- 
ment center 8 of the customer network 5 as well. That is, 
there is a mobile terminal 52 in addition to the customer 
network management center 8. The VPN service is con- 
trolled semi-automatically by remote operation. 
[0273] Information is sent to the mobile terminal 52 
(customer operation manager) via the RAN 51 of the pro- 
vider network 4. Note that the method of connection to the 
customer operation manager (52) for confirmation as in the 
embodiment described above is as follows. 
[0274] FIG. 27 is a view schematically showing the 
method of connection to the operation manager, while FIG. 
28 is a view schematically showing advance preparations 
with the operation manager. 

[0275] According to FIG. 27, the terminal 41 of the 
operation manager 40 selects the method of connection 
(communication means) in advance. 
[0276] Next, the mail address (Mail) of the destination or 
the number of the portable telephone (Mobile) is input. 
[0277] Referring to FIG. 28, the content of the mail sent 
to the mobile terminal 52 is illustrated. 
[0278] As the above advance preparations, it is necessary 
to set the contract contents of the VPN service conditions. 
An example of the contents is shown in FIG. 28. 
[0279] When performing the control at the mobile termi- 
nal 52, the contract contents are set in advance as the 
advance preparations for simplifying the operation at the 
mobile terminal 52. This makes it possible for the owner of 
the terminal 52 to easily respond. For example, he or she 
may press the # key to input the number. The terminal 52 
may be notified by voice or mail. 
[0280] Thus, the operation manager 40 can dynamically 
change the VPN service conditions by the selection of the 
mail address or the number of the mobile terminal. Even if 
the manager of the customer network 5 is absent, there is no 
influence upon the VPN service of the customer. 
[0281] That is, even if the customer side operation man- 
ager 40 is not in the network management center 8, it is 
possible to set the VPN service conditions, for example, 
increase the VPN service bandwidth. 
[0282] Sixth Embodiment 

[0283] Next, an explanation will be made of a mode of 
communication between the manager and an agent in the 
VPN service management system 1 according to the present 
invention. 



[0284] FIG. 29 is a view of the configuration of FIG. 17 
with the sixth embodiment applied thereto. 
[0285] Accordingly, most of the figure is the same as the 
configuration of FIG. 17. The difference resides in that a 
customer side in-band means 61 and a provider side in-band 
means 62 are shown. 

[0286] The point of the sixth embodiment resides in the 
following configuration. Namely, in-band means for using 
the VPN per se, as in-band, constructed by a contract 
between the provider and the customer is provided for 
cooperation between the VPN service manager 2 and the 
VPN service agent 3. 

[0287] Concretely, the in-band means 61 and 62 are 
formed as illustrated by reference numerals 61 and 62 at the 
customer edge (CE) and the provider edge (PE) arranged 
inside the provider network 4 for connection with the 
customer edge (CE). 

[0288] Since the in-band is utilized in this way, the opera- 
tion of (4) ("VPN service condition change order") in FIG. 
17 is carried out through the route 63 in-band as shown in 
FIG. 29. 

[0289] Summarizing this, according to the sixth embodi- 
ment, by using the VPN per se contracted for between the 
provider and the customer in-band as the communication 
means between the VPN service agent 3 and the VPN 
service manager 2, a change of the VPN service conditions 
can.be communicated without introducing a new indepen- 
dent communication means. Also, security can be simulta- 
neously maintained. 

[0290] Next, the in-band means will be explained. 
[0291] FIG. 30 is a view explaining the in-band means 
according to the present invention. 

[0292] In the figure, the customer edge (CE) is provided 
with a mechanism (in-band means 61) for transferring 
information at the monitor use port by VPN in-band. 
[0293] Similarly, the provider edge (PE) is provided with 
a mechanism (in-band means 62) for transferring the infor- 
mation at the monitor use port by VPN in-band. 
[0294] In order to realize the mechanism necessary for this 
provider edge, the following two information (i) and (if) are 
set in advance as configuration data on the provider edge PE: 

[0295] (i) IP address of the VPN service agent 3 

managing the concerned provider edge (PE). 
[0296] (ii) Identifier (VPN-id) of VPN through which 
the information should pass between the customer 
and the provider. 
[0297] On the other hand, in order to realize the mecha- 
nism necessary for the customer edge (CE), the method of 
connection of the customer edge (CE) and the VPN service 
agent 3 must be considered. Two plans of this method of 
connection are shown in the figure. 
[0298] FIG. 31 is a view of a first connection method 
between the customer edge (CE) and the agent 3, while FIG. 
32 is a view of a second connection method between the 
customer edge (CE) and the agent 3. 
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[0299] FIG. 31 shows a method of directly connecting the 
customer edge (CE) from the maintenance terminal use 
Ethernet port on the customer edge (CE) side to the agent 3 
without via the network. 

[0300] FIG. 32 shows a method of connecting the cus- 
tomer edge (CE) and the agent 3 via the network (customer 
network 5). 

[0301] FIG. 33 is a view of an example of connection 
between the manager 2 and the agent 3 under the in-band 
mode. 

[0302] This will be explained according to the figures. 
[0303] (1) The control information reaches up to the 
customer edge (CE) of the concerned VPN (customer A 
network) by the above (ii), that is, VPN-id. Next, (2) the 
control information departs for the network (customer A 
network) side by either of the above two connection meth- 
ods (FIG. 31, FIG. 32), then (3) the control information 
reaches the VPN service agent A(3-A) of the intended IP 
address by the above (i), that is, the IP address. 
[0304] Note that, for the communication means between 
the provider edge (PE) and the VPN service manager 2, there 
are known techniques such as the method of setting an 
independent VPN network and the method of leasing an 
existing VPN from the provider edge (PE) to the middle and 
utilizing the IP network between the middle and the VPN 
service manager 2. 

[0305] While the overall VPN service management sys- 
tem 1 according to the present invention was explained in 
detail above, the characteristic feature of the present inven- 
tion resides in not only the system 1 as a whole, but also the 
VPN service manager 2 per se and the VPN service agent 3 
per se comprising that system 1. The characteristic configu- 
ration of the VPN service manager 2 per se and the char- 
acteristic configuration of the VPN service agent 3 will be 
summarized on the basis of the explanation based on FIG. 
1 to FIG. 30 mentioned above. 

[0306] First, the characteristic configuration of the VPN 
service manager 2 per se is as follows. 

[0307] (A) The VPN service manager 2 is a VPN 
service manager comprising part of a VPN service- 
management system 1 for managing a VPN service 
for a communication network provided with a cus- 
tomer network 5 servicing customers and a provider 
network 4 constructed by a provider for providing 
the VPN service to the customers and connected to 
the customer network 5. 
[0308] This manager 2 is comprised so as to manage the 
VPN service for the provider network 4 and to change the 
VPN service conditions of the VPN service to be provided 
by the VPN service management system 1 in real time in 
accordance with the operation status of the customer net- 
work 5 under the management of the VPN service agent 3 
in cooperation with the VPN service agent 3 managing the 
VPN service for the customer network S. 
[0309] Further, this manager 2 is comprised of a VPN 
service order control means 21 for receiving an order for 
changing a VPN service condition when the order is gen- 
erated from the VPN service agent 3 and outpuiting the 
changed VPN service condition related to that order, a VPN 



service condition retrieval means 22 for retrieving a present 
VPN service condition given to the concerned customer 
network 5 from the VPN service condition table 14 when 
that order is generated, a VPN service condition decision 
means 23 for deciding whether or not a range by which the 
changed VPN service condition exceeds the present VPN 
service condition is within an allowable range, a VPN 
service condition setting means 24 for resetting the present 
VPN service condition to the changed VPN service condi- 
tion when the result of the decision is "POSSIBLE", and a 
customer edge control means 25 for controlling a customer 
edge (CE) based on the reset VPN service condition. 
[0310] Here, the manager 2 has an operation status change 
notifying means 43 for notifying an operation manager 40 of 
the customer network 5 of a request for change of a VPN 
service condition from the customer network management 
system 13 automatically in accordance with a monitoring 
result when a customer network management system 
(C-NMS) 13 monitors the operation status of the customer 
network 5 and changes the VPN service condition when 
obtaining a reply of permission with respect to the notifi- 

[0311] (B) On the other hand, the VPN service agent 
3 is a VPN service agent comprising part of a VPN 
service management system 1 for managing a VPN 
service for a communication network provided with 
a customer network 5 servicing customers and a 
provider network 4 constructed by a provider for 
providing the VPN service to the customers and 
connected to the customer network 5. 
[0312] This agent 3 is comprised so as to manage the VPN 
service for the customer network 5 and to change a VPN 
service condition of the VPN service to be provided by the 
VPN service management system 1 in real time in accor- 
dance with the operation status of the customer network 5 
under management in cooperation with a VPN service 
manager 2 managing a VPN service for a provider network 
4. 

[0313] Further, this agent 3 has a customer network man- 
agement system (C-NMS) 13 for managing the customer 
network 5. This customer network management system 13 
monitors the customer edge (CE) and communicates with 
the provider network 4 side. 

[0314] Further, this agent 3 is provided with a service 
menu concerning the VPN service from the VPN service 
manager 2 as a VPN service condition table 14 and transmits 
a request for change via the service menu to the VPN service 
manager 2 when a request for change of a VPN service 
condition is generated at the customer side. 
[0315] Also, this agent 3 is provided with a VPN service 
condition retrieval means 31 for retrieving a current VPN 
service condition given to the concerned customer network 
5 from the VPN service condition table 14 when an order for 
changing a VPN service condition is generated from the 
customer and a VPN service order issuing means 32 for 
issuing an order to the VPN service manager 2 based on the 
retrieved VPN service condition. 

[0316] Further, this agent 3 has a parameter table 34 for 
pre-setting and holding changed condition data to be 
referred to when changing a VPN service condition. The 
customer network management system (C-NMS) 13 trans- 
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mite the changed VPN service condition determined by 
referring to the parameter table 34 to the VPN service 
manager 2 when deciding that the VPN service condition 
should be changed by the monitoring result. 
[0317] Furthermore, this agent 3 has an operation status 
change notifying means 43 for notifying a decision to an 
operation manager 40 of the customer network 5 when the 
customer network management system 13 monitors the 
operation status of the customer network 5 and decides that 
a VPN service condition should be changed by the moni- 
toring result and changes the VPN service condition by 
cooperation of the VPN service manager 2 and a provider 
network management system (P-NMS) 12 when obtaining a 
reply of permission with respect to the notification. 
[0318] As explained in detail above, according to the 
present invention, in a VPN service, the following effects 
can be obtained. 

[0319] 1) A request on the customer side that the 
contract conditions between the customer and the 
provider be changed can be rapidly responded to. 
[0320] 2) The quality conditions and usage condi- 
tions of a VPN service such as an IP-VPN service 
can be easily changed. 
[0321] 3) The service level agreement contracted for 
between a customer and the provider can be always 
fulfilled. 

[0322] While the invention has been described with ref- 
erence to specific embodiments chosen for purpose of illus- 
tration, it should be apparent that numerous modifications 
could be made thereto by those skilled in the art without 
departing from the basic concept and scope of the invention. 



What is claimed is: 

1. A VPN service management system for managing a 
VPN service for a communication network provided with a 
customer network for servicing customers and a provider 
network constructed by a provider for providing the VPN 
service to the customers and connected to the customer 
network, comprising: 

a VPN service manager for managing said VPN service 
for said provider network; and 

a VPN service agent for managing said VPN service for 
said customer network, 

said VPN service manager changing a VPN service con- 
dition of said VPN service to be provided in real time 
in accordance with an operation status of said customer 
network under the management of the VPN service 
agent in cooperation with said VPN service agent. 

2. A VPN service management system as set forth in claim 

1, 

said system further comprising a provider network man- 
agement system cooperating with said VPN service 
manager on said provider side, 

said provider network management system managing the 
provider network including also a customer edge 
arranged in said customer network for connection with 
said provider network. 



3. A VPN service management system as set forth in claim 

2, 

said system further comprising a customer network man- 
agement system cooperating with said VPN service 
agent and managing said customer network on said 

the customer network management system monitoring 
said customer edge and communicating with said pro- 
vider network side. 

4. A VPN service management system as set forth in claim 
2, wherein 

said VPN service manager provides a service menu con- 
cerning the VPN service as a VPN service condition 
table to said VPN service agent, 

when there is a request for change of a VPN service 
condition on said customer side, the VPN service agent 
transmits the request for change to the VPN service 
manager via said service menu, and 

the VPN service manager reflects the request for change 
in said provider network via said provider network 
management system. 

5. A VPN service management system as set forth in claim 
1, wherein said VPN service manager is comprised of: 

a VPN service order control means for receiving an order 
when an order for changing the VPN service conditions 
is generated from a VPN service agent and outputting 
the changed VPN service conditions concerned in that 

a VPN service condition retrieval means for retrieving the 
present VPN service conditions given to the concerned 
customer network from the VPN service condition 
table when that order is generated, 

a VPN service condition decision means for deciding 
whether or not the range by which the changed VPN 
service conditions exceed the present VPN service 
conditions is within an allowable range, 

a VPN service condition setting means for resetting the 
present VPN service conditions to the changed VPN 
service conditions when the result of said decision is 
"POSSIBLE", and 

a customer edge control means for controlling the cus- 
tomer edge based on the reset VPN service-conditions. 

6. A VPN service management system as set forth in claim 
1, wherein said VPN service agent is comprised of: 

a VPN service condition retrieval means for retrieving a 
current VPN service condition given to the customer 
network from the VPN service condition table when an 
order for changing the VPN service conditions is gen- 
erated from a customer; and 

a VPN service order issuing means for issuing the order 
to the VPN service manager based on the retrieved 
VPN service condition. 

7. A VPN service management system as set forth in claim 
6, wherein the VPN service manager is provided with a 
customer edge control means for controlling a customer 
edge based on the VPN service condition reset by the VPN 
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service manager upon receipt of said order when said VPN 
service manager controls the customer edge through said 
VPN service agent. 

8. A VPN service management system as set forth in claim 
3, wherein said customer network management system 
monitors the operation status of said customer network and 
changes of said VPN service condition by full automation 
without interposition of an operator through cooperation of 
said VPN service agent and both said VPN service manager 
and said provider network management system in accor- 
dance with the monitoring result. 

9. A VPN service management system as set forth in claim 
8, wherein 

said VPN service agent has a parameter table for pre- 
setting and holding changed condition data to be 
referred to when changing said VPN service condition, 
and 

said customer network management system transmits the 
changed VPN service condition determined by refer- 
ring to said parameter table to said VPN service man- 
ager when deciding that said VPN service condition 
should be changed by said monitoring result. 

10. A VPN service management system as set forth in 
claim 3, wherein 

said system provides in said VPN service agent an opera- 
tion status change notifying means for notifying a 
decision to an operation manager of said customer 
network when said customer network management 
system monitors the operation status of said customer 
network and decides that said VPN service condition 
should be changed by the monitoring result and 

the VPN service agent serai-automatically changes said 
VPN service condition by cooperation of said VPN 
service manager and said provider network manage- 
ment system when obtaining a reply of permission with 
respect to said notification. 

11. A VPN service management system as set forth in 
claim 10, wherein 

said VPN service agent has a parameter table for pre- 
setting and holding changed condition data to be 
referred to when changing said VPN service condition 
and 

inputs the changed VPN service condition determined by 
referring to said parameter table to said operation status 
change notifying means when said customer network 
management system judges by said monitoring result 
that said VPN service condition should be changed. 

12. A VPN service management system as set forth in 
claim 10, wherein, 

when said VPN service agent and said customer network 
management system cooperate in a server/client mode, 
a remote client terminal attached to said operation 
manager is introduced as another one of the clients, and 

said operation status change notifying mean is realized by 
cooperation of said VPN service agent and said remote 
client terminal in the server/client mode. 

13. A VPN service management system as set forth in 
claim 12, wherein said VPN service agent and said remote 
client terminal are connected by a leased line or in-band. 



14. A VPN service management system as set forth in 
claim 3, 

said system providing at said VPN service manager side 
an operation status change confirming means for 
requesting confirmation at a remote operation manager 
of a customer upon receipt of a request when said 
customer network management system monitors the 
operation status of said customer network and auto- 
matically request a change of said VPN service condi- 
tion to said VPN service manager in accordance with 
the monitoring result and 

said VPN service manager changes said VPN service 
condition when obtaining a reply of permission with 
respect to said notification. 

15. A VPN service management system as set forth in 
claim 14, wherein said operation status change confirming 
means is realized by said VPN service manager and a mobile 
terminal wirelessly connected to said provider network. 

16. A VPN service management system as set forth in 
claim 14, wherein 

said VPN service agent has a parameter table for pre- 
setting and holding changed condition data to be 
referred to when changing said VPN service condition, 

said customer network management system transmits the 
changed VPN service condition determined by refer- 
ring to said parameter table to said VPN service man- 
ager when judging that said VPN service condition 
should be changed according to said monitoring result. 

17. A VPN service management system as set forth in 
claim 3, further having an in-band means for using the VPN 
per se, as in-band, constructed by a contract between said 
provider and said customer in-band for said cooperation 
between said VPN service manager and said VPN service 

Sg 18. A VPN service management system as set forth in 
claim 17, wherein in-band means are formed at said cus- 
tomer edge and a provider edge arranged inside said pro- 
vider network for connection with the customer edge. 

19. A VPN service manager comprising part of a VPN 
service management system for managing a VPN service for 
a communication network provided with a customer net- 
work servicing customers and a provider network con- 
structed by a provider for providing the VPN service to the 
customers and connected to the customer network, 

said VPN service manager is operative to manage the 
VPN service for the provider network and 

change a VPN service condition of the VPN service to be 
provided by the VPN service management system in 
real lime in accordance with the operation status of the 
customer network under the management of a VPN 
service agent managing the VPN service for the cus- 
tomer network in cooperation with the VPN service 

20. A. VPN service manager as set forth in claim 19, 
provided with: 

a VPN service order control means for receiving an order 
for changing a VPN service condition when the order 
is generated from the VPN service agent and outputting 
the changed VPN service condition related to that 
order, 
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a VPN service condition retrieval means for retrieving a 
present VPN service condition given to the concerned 
customer network from the VPN service condition 
table when that order is generated, 

a VPN service condition decision means for deciding 
whether or not a range by which the changed VPN 
service condition exceeds the present VPN service 
condition is within an allowable range, 

a VPN service condition setting means for resetting the 
present VPN service condition to the changed VPN 
service condition when the result of the decision is 
"POSSIBLE", and 

a customer edge control means for controlling a customer 
edge based on the reset VPN service condition. 

21. A VPN service manager as set forth in claim 19, 
further 

having an operation status change notifying means for 
notifying an operation manager of the customer net- 
work of a request for change of a VPN service condi- 
tion from the customer network management system 
automatically in accordance with a monitoring result 
when a customer network management system moni- 
tors the operation status of the customer network and 

changing the VPN service condition when obtaining a 
reply of permission with respect to the notification. 

22. A VPN service agent comprising part of a VPN service 
management system for managing a VPN service for a 
communication network provided with a customer network 
servicing customers and a provider network constructed by 
a provider for providing the VPN service to the customers 
and connected to the customer network, 

said VPN service agent is operative to manage the VPN 
service for the customer network and 

change a VPN service condition of the VPN service to be 
provided by the VPN service management system in 
real time in accordance with the operation status of the 
customer network under management in cooperation 
with a VPN service manager managing a VPN service 
for a provider network. 

23. A VPN service agent as set forth in claim 22, wherein 
the agent has a customer network management system for 

managing the customer network and 



this customer network management system monitors a 
customer edge and communicates with the provider 
network side. 

24. A VPN service agent as set forth in claim 22, which 
is provided with a service menu concerning the VPN 

service from the VPN service manager as a VPN 
service condition table and 
transmits a request for change via the service menu to the 
VPN service manager when a request for change of a 
VPN service condition is generated at the customer 

25. A VPN service agent as set forth in claim 22, further 
provided with: 

a VPN service condition retrieval means for retrieving a 
current VPN service condition given to the concerned 
customer network from the VPN service condition 
table when an order for changing a VPN service 
condition is generated from the customer and 

a VPN service order issuing means for issuing an order to 
the VPN service manager based on the retrieved VPN 
service condition. 

26. A VPN service agent as set forth in claim 23, wherein 
the agent has a parameter table for pre-setting and holding 

changed condition data to be referred to when changing 
a VPN service condition and 
the customer network management system transmits the 
changed VPN service condition determined by refer- 
ring to the parameter table to the VPN service manager 
when deciding that the VPN service condition should 
be changed by the monitoring result. 

27. A VPN service agent as set forth in claim 23, wherein 
the agent has an operation status change notifying means 

for notifying a decision to an operation manager of the 
customer network when the customer network man- 
agement system monitors the operation status of the 
customer network and decides that a VPN service 
condition should be changed by the monitoring result 
and 

changes the VPN service condition by cooperation of the 
VPN service manager and a provider network manage- 
ment system when obtaining a reply of permission with 
respect to the notification. 
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n provides quality assured network services in 
a multi-domain network and comprises a network service 
management device for managing device clusters incorpo- 
rated within the operations management network of each 
provider network and receiving service orders, and a multi- 
domain service broker for providing a broker function for 
achieving agreement between a plurality of providers, and 
the multi-domain service broker further comprises a device 
for collecting domain information and information relating 
to the services each provider is able to provide from the 
network service management devices, and a device which on 
receipt of a network service request from a customer, 
extracts the network service management device of the 
domain which is able to satisfy the required quality level, 
and then issues instructions for the setting of the required 
information within the extracted network service manage- 
ment device. 
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i^ ir- fnr tending on either an intejnalQ Lanext erna) toward destination 

(Loaic L1) If the current domain is the source domain AND the service status 
L "Accepted" AND the inter domain route is not designed, transfer to the 
externa! system. 

(Loqic L2) If the current domain is the source domain AND the service status 
is" Accepted" AND the inter domain route has already been designed, 
transfer to the internal system. 

(Loqic L3) If the service status from the source domain to the cutTent domain 
s "Intra domain Allocated" AND the service status . from *e <town^ 
domain to the destination domain is "Undefined 0 , transfer to the external 
system. 

(Logic L4) If the current domain is not the source domain .AND 'the service 
status of the current domain is "Accepted AND the operation result .s 
Undefined", transfer to the Internat system. 

(Loqic L5) If the current domain is not the source domain AND the service 
status of all the domains is "Intra domain Allocated", transfer to the external 
system. 

(Logic L6) If the current domain is the source domain AND the service ^ status 
of all the domains is "intra domain Allocated", transfer to the internal system. 

(Loaic 17) If the service status from the source domain to the current domain 
f4 ovfloned* AND the service status from the downstream domain to the 
M^KXaln is "Intra domain Allocated" AND the operation result for 
fhe downstream domain is "Undefined", transfer to the external system. 

n nnir L8\ If the service status from the source domain to the upstream 
ffin "Provteioned" AND the service status from the current domam to 
tt dest naSn domain is "Intra domain Allocated" AND the .operat.cn result 
for the current domain is "Undefined", transfer to the internal system. 

(Loaic L9> If there are multiple domains AND the current domain is not the 
so See domain AND the service status of all the domains .s "Provisioned . 
transfer to the external system. 

(Logic L10) If there are multiple domains AND the current domain is the 
source domain AND the service status of all the domams is Provisioned , 
transfer to the internal system. 
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Logic for deciding an external forward destination 

{Logic L1 1) If the current domain is the source domain AND the service 
status is "Accepted" AND the inter domain route is not designed, transfer to 
inter domain route design. 

(Logic L12) If the current domain is not the destination domain AND the 
service status from the source domain to the current domain is "Intra domain 
Allocated" AND the service status from the downstream domain to the 
destination domain is "Undefined", transfer to admission control decision. 

(Logic L13) if the current domain is not the source domain AND the service 
status of all the domains is "Intra domain Allocated", transfer to service 
provisioning request transmission. 

(Logic L14) If the current domain is not the destination domain AND the 
service status from the source domain to the current domain is "Provisioned" 
AND the service status from the downstream domain to the destination 
domain is "Intra domain Allocated" AND the operation result for the 
downstream domain is "Undefined", transfer to service provisioning request 
transmission. 

(Logic L1 5) If the current domain is not the source domain AND the service 
status of ali the domains is "Provisioned", transfer to service provisioning 
response transmission. 
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Logic for deciding an intra domain forward destination 

(Logic L31 ) ff the current domain is the source domain AND the service 
status is "Accepted" AND the inter domain route.is already designed AND the 
operation result for the current domain is "Undefined", transfer to intra domain 
route design. 

{Loqic L32) if the current domain Is the source domain AND the service 
status of all the domains is "Intra domain Allocated", transfer to provisioning. 

(Logic L33) If the service status from the source domain to the upstream 
domain is "Provisioned" AND the service status from the current domain to 
the destination domain is "Intra domain Allocated" AND the operation result 
for the current domain is "Undefined", transfer to provisioning. 

(Logic L34) If the current domain is the source domain AND the service 
status of all the domains is "Provisioned", then finish processing. 
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QUALITY ASSURED NETWORK SERVICE 
PROVISION SYSTEM COMPATIBLE WITH A 
MULTI-DOMAIN NETWORK AND SERVICE 
PROVISION METHOD AND SERVICE BROKER 
DEVICE 

BACKGROUND OF THE INVENTION 
[0001] 1. Field of the Invention 

[0002] The present invention relates to a quality assured 
network service provision system, a service provision 
method, and a service broker device for providing a quality 
assured network service across a plurality of domains man- 
aged by different providers. 
[0003] 2. Description of the Related Art 
[0004] As the Internet has developed, an increasing num- 
ber of network service providers are providing network 
services. Against this background, a network service capable 
of ensuring the end to end quality demanded by customers 
across a plurality of networks interconnected between dif- 
ferent providers has been keenly sought. 
[0005] Examples of systems for interconnecting a plural- 
ity of this type of communication network are disclosed in 
the Japanese Unexamined Patent Application, First Publi- 
cation No. Hei-08-274874 entitled "Network Interconnec- 
tion Device and Method", and the Published Japanese trans- 
lation No. 11-501495 of PCT International Publication 
entitled "Network Link for Interconnecting Service Control 
Points of Traffic Management Control Load Distribution 
Groups". 

[0006] In a network connection method disclosed in the 
Japanese Unexamined Patent Application, First Publication 
No. Hei-08-274874, elements within different electrical 
communication networks are interconnected, and a mediated 
access processor (MAP) is provided for connecting an 
intelligent network for providing service across network 
boundaries. This MAP enables the conversion, inspection 
and emulation of messages exchanged between networks, 
and provides a transparent electrical communication net- 
work in which users need not change existing interfaces and 
protocols. 

[0007] Furthermore, in the Published Japanese translation 
No.11-501495 of PCT International Publication, in order to 
overcome problems associated with elements of a network 
becoming overloaded in network environments incorporat- 
ing a plurality of service providers and multi-vendor 
devices, an interconnection function is provided by a direct 
network link between two service control points (SCP) 
which are used in a load distribution mode. 
[0008] This network link involves interconnecting two 
SCPs within a load distribution group, and as a result offers 
a method for controlling the SCPs to not only exchange 
information relating to congestion levels and control func- 
tions, but also send queries to an SCP which is not over- 
loaded. 

[0009] However, the following problems arise with the 
conventional technology described above. Namely, in the 
technique disclosed in the Japanese Unexamined Patent 
Application, First Publication No. Hei-08-274874, abso- 
lutely no consideration is given to operations for provision- 
ing the two interconnected electrical communication net- 



works and providing network services, and so a network 
service of guaranteed quality cannot be provided via this 
type of interconnected network. 

[0010] Furthermore, the invention disclosed in the Pub- 
lished Japanese translation No. 11-501495 of PCT Interna- 
tiona) Publication simply provides a method for dealing with 
a network overload, and even in such cases is unable to 
provide a network service in which the customer is guaran- 
teed sufficient quality. 

[0011] In addition, operation information for provisioning 
the interconnected communication networks and providing 
network services is not exchanged, and no mechanism is 
provided for the consistent provision of service form the 
interconnected network. Moreover, a SCP within a commu- 
nication device uses a great deal of resources including the 
CPU, and because a shift to high performance is needed in 
order to manage the plurality of control function lists, the 
cost of communication devices deployed within the network 
increases, and increases in processing loading also become 
problematic. 

[0012] In this manner, conventional networks comprise a 
plurality of network service providers, and because suffi- 
cient consideration has not been given to the provision of 
uniform quality across the network, there is no option but to 
provide high performance devices for exchanging informa- 
tion individually within each communication network, and 
consequently conventional networks have been plagued by 
problems such as a lack of network expandability and a lack 
of connection flexibility. 

SUMMARY OF THE INVENTION 

[0013] The present invention takes the problems inherent 
in the conventional technology into account, with an object 
of providing a network service which guarantees the level of 
quality required by the customer through a plurality of 
networks operated by different providers, and moreover by 
incorporating a dedicated service broker device (hereafter 
referred to as a multi-domain service broker) for managing 
information which can be provided between providers and 
designing routes for spanning provider networks, aims to 
provide a system which is able to achieve function distri- 
bution and a high level of expandability. 
[0014] A quality assured network service provision system 
compatible with a multi-domain network according to the 
present invention is a communication network comprising a 
plurality of operations management networks (domains) 
which are connected to a plurality of customer networks 
with user terminals and which are managed by different 
providers, which further incorporates a network service 
management device for managing collectively device clus- 
ters incorporated within the operations management net- 
work of each provider and receiving service orders and 
faults information from customers, and a multi-domain 
service broker at the functional host layer of the network 
service management device for providing a broker function 
for enabling agreement between a plurality of providers. 
[0015] Moreover, the network service management device 
comprises information on services which can be provided by 
each provider, and a device for outputting domain informa- 
tion to the multi-service broker, and the multi-service broker 
comprises devices for storing output information received 
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from each network service management device, receiving 
requests for network service from customers and providing 
a broker function for achieving agreement between a plu- 
rality of providers, selecting the network service manage- 
ment device of a domain which will satisfy the required 
quality level, and issuing commands for introducing, and 
then setting, the information necessary for the selected 
network service management device. 
[0016] A first effect of the present invention is the ability 
to provide a quality assured network service across a plu- 
rality of domains managed by different providers. The 
reason such an effect is achievable is that not only does a 
design server calculate a communication route within each 
domain which will satisfy the required level of quality, but 
that by the exchange of request and response messages 
between bandwidth brokers, a communication route can be 
calculated through a plurality of domains. Moreover, the 
inter domain communication quality is guaranteed by the 
bandwidth brokers managing the available resource between 
the domains. 

[0017] A second effect is that system maintenance and 
version upgrades of the customer care server, the policy 
server, the design server, the network management devices 
and the workflow server is simple. The reason this effect is 
achievable is that because only the bandwidth brokers have 
an interface section with the different providers, it is unlikely 
that any alterations to the aforementioned servers will have 
repercussions on the bandwidth brokers. 
[0018] A third effect is that the systems of the customer 
care server, the policy server, the design server, the network 
management devices and the workflow server can be con- 
cealed from other providers. The reason this effect is achiev- 
able is that because only the bandwidth brokers have an 
interface section with the different providers, the only pro- 
cessing visible from an external provider is the interface 
provided by the bandwidth broker. 
[0019] A fourth effect is that an inter domain route from 
the customer network of the source network to the destina- 
tion network can be calculated quickly, and furthermore 
need not be managed by each of the providers. The reason 
this effect is achievable is that the multi-domain service 
broker, by managing the service information for all of the 
associated domains, is able to output the domain cluster 
which links the source network where the request originated 
with the destination network. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0020] FIG. 1 is a structural diagram of a multi-domain 
network. 

[0021] FIG. 2 is a block diagram showing the functions of 
a network service management device. 
[0022] FIG. 3 is a block diagram showing the functions of 
a multi-domain service broker. 

[0023] FIG. 4 is a flowchart showing the sequence within 
a service registration stage of the present invention. 
[0024] FIG. 5 is a flowchart showing the operations of a 
service agreement stage of the present invention. 
[0025] FIG. 6 is a flowchart showing the operations of a 
service provisioning stage of the present invention. 



[0026] FIG. 7 is a transition diagram of service status for 
the present invention. 

[0027] FIG. 8 is a description of the status labels for the 

transition diagram of service status. 

[0028] FIG. 9 is a table of logic for deciding on either an 

internal or an external forward destination. 

[0029] FIG. 10 is a table of logic for deciding an external 

forward destination. 

[0030] FIG. 11 is a table of logic for deciding an intra 
domain forward destination. 

DETAILED DESCRIPTION OF THE 
INVENTION 

[0031] An object of the present invention is to provide, for 
a multi-domain network comprising operations management 
networks (domains) operated by a plurality of network 
service providers, a network service which guarantees the 
quality of communication required by a customer in the 
provision of network services, from end to end, namely from 
the customer who initiated the request through to the cus- 
tomer at whom the request is directed. 
[0032] Then, by introducing a multi-domain service bro- 
ker for collecting information between the network service 
management devices provided in each domain, promoting 
interconnectivity, and brokering the necessary services, a 
seamless network service provision system can be realized, 
even between different domains. 

[0033] As follows is a description of the construction of an 
embodiment of the present invention with reference to the 
drawings. FIG. 1 is a structural diagram showing a multi- 
domain network of the embodiment of the present invention, 
and comprises a plurality of customer networks and a 
plurality of provider networks. A multi-domain network is a 
configuration in which customer networks positioned in 
mutually remote locations are able to communicate with one 
another via a plurality of provider operations management 
networks. Specific examples include the case of a network 
between a head office and a branch office, or the case where 
affiliated companies create an extranet. 
[0034] In the example shown in FIG. 1, operations man- 
agement networks of different providers, namely an opera- 
tions management network 8 of a provider A and an opera- 
tions management network 9 of a provider B exist between 
a customer network E and a customer network D, and each 
operations management network incorporates a plurality of 
communicalion device clusters 3 for performing the pro- 
cessing for the relayed transmission of data. 
[0035] In this embodiment, the provision of a service for 
sending data from the customer network E to the customer 
network D is taken as an example, and the customer network 
E is termed the source network 4, and the customer network 
D the destination network 5. 

[0036] In order for the communication quality required by 
the customer to be satisfied from the source network 4 
through to the destination network 5, it is also necessary for 
both of the intermediate providers A, B to also meet the 
required communication quality standards of the customer. 
Here, the term communication quality refers to factors such 
as delays, fluctuations and bandwidth relating to data traffic. 
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Consequently, negotiations and cooperative operations are 
necessary between the provider A and the provider B to 
agree on communication quality. Furthermore, in order to 
detect the status of the communication device clusters 3 
within each provider, and perform setting and control of 
specific information, a network service management device 
2 is deployed at the functional host layer of the operations 
management network of each provider A, B. 
[0037] (1) Network Service Management Device 
[0038] The network service management devices 2 per- 
form management operations such as the management of 
network configurations, fault management, performance 
management, security management, customer management 
and service management, and in particular manage the status 
of the network within the operations management network 
and receive service orders and fault reports and the like from 

[0039] FIG. 2 is a block diagram showing the functions of 
a network service management device. As shown in the 
diagram, the network service management device incorpo- 
rates a variety of devices clusters for providing internet 
connection services, and managing customer information, 
network information, and provider information. The major 
components include an input and output device 21 such as 
a keyboard or a display to enable the operations manager of 
the provider to input information relating to the services 
provided by the provider and domain information such as 
information relating to the operations management network 
configuration of the provider, a storage device 22 for storing 
input information on the basis of information type, a work- 
flow server 24 for determining the internal or external 
forward destination for each processing command, as well as 
a bandwidth broker 23 for performing registrations of 
domain information and service information with the multi- 
domain service broker and cooperating with the workflow 
server 24 in determining the subject for executing the next 
process, and internal processing servers such as a customer 
care server 25 for performing processing within the network 
service management device, a policy server 26, a design 
server 27, and a network management device 28. 
[0040] As follows is a description of the storage device 22, 
the bandwidth broker 23, the workflow server 24, and each 
of the various internal processing servers inside the network 
service management device 2. 
[0041] Storage Device 

[0042] The storage device 22 inside the network service 
management device 2 is a device for storing information on 
the services provided by the provider and domain informa- 
tion such as information on the configuration of the opera- 
tions management network offered by the provider, and 
comprises the following plurality of storage sections for 
storing each piece of information on the basis of information 
type; namely, a service level agreement storage section 221, 
a domain configuration storage section 222, a network 
configuration storage section 223, a resource storage section 
224, a policy storage section 225 and a service storage 
section 226. 

[0043] In this embodiment, a service level agreement 
storage section 221 is a device for storing agreement infor- 
mation once provider A has reached an agreement with 
provider B relating to network service, although this issue is 



described below in further detail. This agreement informa- 
tion includes information relating to communication devices 
for linking the operations management networks of the 
provider A and provider B, as well as information on the 
identification data and type of the circuitry linking the 
communication devices, information relating to types of 
service and data traffic profiles, and information on the 
available hours for the agreement. 

[0044] The data traffic profile information . incorporates 
information on bandwidth and communication quality, and 
for example describes information for providing high pri- 
ority communication quality in the case where communica- 
tion data traffic is no more than 10 Mbps, and canceling the 
communication data when the traffic is greater than 10 
Mbps. 

[0045] The domain configuration storage section 222 
stores domain configuration information for providing net- 
work service to customers. Domain configuration informa- 
tion refers to configuration information relating to the opera- 
tions management network of the provider. For instance, in 
the example shown in FIG. 1, the route from the customer 
network of the source network through to the customer 
network of the destination network passes through the 
operations management network of the provider A and the 
operations management network of the provider B. In such 
a case, the link between the operations management network 
of the provider A and the operations management network of 
the provider B is stored in the domain configuration storage 
section 222 as a provider network necessary for providing 
service. 

[0046] The network configuration storage section 223 
stores information relating to the communication device 
clusters 3 inside the operations management network of the 
provider and the circuitry for linking these communication 
device clusters 3. The resource storage section 224 stores 
information relating to the communication devices 3 inside 
the operations management network of the provider, and 
includes information such as the total resource capacity, the 
used resource capacity, and the available resource capacity 
of each of the communication devices 3. Here, the term 
resource typically describes the power of the CPU, the 
memory capacity, and the circuitry bandwidth of the com- 
munication device 3. In this embodiment, resources are 
stored relating to the circuitry bandwidth, although other 
information could also be stored. 

[0047] The policy storage section 225 stores policy which 
functions as the information for performing settings in the 
communication devices 3 of the operations management 
network of the provider. Here, policy refers to the informa- 
tion which should be set in the communication devices 3 for 
providing network service to a customer, expressed in a 
manner which is easily understood by an operator, and is 
described in expressions which are independent of' the 
vendor of the communication device 3. For example in FIG. 
1, the expression guaranteeing high priority communication 
data transfer from the customer network E to the customer 
network D for values of no more than 10 Mbps is one 
example of this type of policy. The service storage section 
226 stores customer information and service information 
received from customers, such as the service order infor- 
mation describing content guaranteeing high priority com- 
munication data transfer from the customer network E to the 
customer network D for values of no more than 10 Mbps. 
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[0048] Bandwidth Broker 

[004?] Next is a description of the configuration of a 
bandwidth broker. The bandwidth broker 23 is a system with 
a data processing function operated by program control, and 
comprises an external system communication device 233, a 
security management device 234, a service level agreement 
management device 231, a domain route management 
device 232, and an internal system communication device 
235. 

[0050] In this embodiment, the external system commu- 
nication device 233 is connected to the network service 
management device cluster 2 of an external system, and to 
a multi-domain service broker 1, and provides an interface 
for communicating with these external systems. The security 
management device 234 ensures the security of internal 
systems when communication with an external system is 
conducted. For example, following connection to an external 
system, the security management device 234 receives 
authentication information from the external system, and 
then only permits information exchange to occur following 
successful authentication. 

[0051] The service level agreement management device 
231 registers the service information agreed upon between 
the providers in the service level agreement storage section 
221, and also manages such information. Furthermore, the 
service level agreement management device 231 also pro- 
vides an interface for registering, editing and deleting ser- 
vice level agreement information input via the output device 
21. 

[0052] The domain route management device 232 regis- 
ters the domain linking information necessary for providing 
network service to customers in the domain configuration 
storage section 222, and also manages such information. The 
internal system communication device 235 provides an 
interface for the bandwidth broker 23 and the workflow 
server 24 to communicate. 
[0053] Workflow Server 

[0054] The workflow server 24, like the bandwidth broker 
23, is a system with a function for processing data which is 
operated by program control, and is connected to the band- 
width broker 23, the customer care server 25, the design 
server 27, the policy server 26, and the network management 
device 28 respectively. The workflow server 24 sends the 
necessary processing commands to each server and manages 
the progress of the commands in accordance with a work- 
flow and an operation flow defined by the provider. 
[0055] Internal Processing Server Cluster 
[0056] Next is a description of the remaining customer 
care server 25, the policy server 26, the design server 27 and 
the network management device 28 which make up the 
internal processing server cluster for processing and con- 
trolling specific settings within the network incorporating 
the communication devices. 

[0057] The customer care server 25 is a system with a data 
processing function operated by program control, and is 
connected to the workflow server 24. The customer care 
server 25 manages service order information received from 
customers, and performs the registering of customer infor- 
mation and service information received from customers in 
the service storage section 226. Furthermore, the customer 



care server 25 also provides an interface for the aforemen- 
tioned service storage section 226 for registering, editing 
and deleting service information input via the output device 
21. 

[0058] The design server 27 is also a system with a data 
processing function operated by program control, and is 
connected to the workflow server 24. The design server 27 
manages the internal network resources of the operations 
management network of the provider, and in the case of this 
embodiment, manages the total bandwidth, the used band- 
width, and the available bandwidth of the network circuitry. 

[0059] When the resource usage status changes, the design 
server 27 updates the information in the resource storage 
section 224, and reads the information from the network 
configuration storage section 223 in order to refer to the 
topology information of the operations management net- 
work of the provider, thereby always managing the most up 
to date network resource information. Furthermore, the 
design server 27 also performs processing for registering 
policy information as a resource usage plan output in the 
policy storage section 225. 

[0060] The policy server 26 is a system with a data 
processing function operated by program control, and is 
connected to the workflow server 24. The policy server 26 
reads policy information stored in the policy storage section 
225, and converts the policy information into setting infor- 
mation for a communication device 3 specific to a vendor. 
The policy server 26 then performs provisioning of the 
communication device 3 in order to enable the provision of 

[0061] The network management device 28 is a system 
with a data processing function operated by program con- 
trol, and is connected to the workflow server 24. The 
network management device 28 provides a network fault 
management function for the configuration and open chan- 
nel and the like incorporating both the communication 
devices 3 within the operations management network of the 
provider, and the connection configuration of the circuitry 
for connecting these communication devices. 

[0062] A network service management device according 
to the configuration described above provides the necessary 
information to a multi-domain service broker which pro- 
vides a broker function for connections between providers, 
and also provides functions for performing actual sellings 
and control operations on communication devices, based on 
information supplied from the multi-domain service broker. 

[0063] (2) Multi-domain Service Broker 
[0064] As follows is a description of the multi-domain 
service broker 1. The multi-domain service broker 1 is 
positioned at the functional host level of the network service 
management device 2, and provides a broker function for 
achieving agreement between a plurality of providers. 
[0065] FIG. 3 is a block diagram showing the functions of 
the multi-domain service broker 1. As is shown in FIG. 3, 
the multi-domain service broker 1 comprises an input and 
output device 11 made up of components such as a keyboard 
and a display, a data processing device 13 which is operated 
under program control, and a storage device 12 for storing 
information. 
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[0066] The input and output device 11 is connected to a 
security management device 133, and is able to perform 
operations for registering, converting and deleting authen- 
tication information and the like used for communications 
with the network service management device clusters 2 of 
the providers managed by the multi-domain service broker 
1. The storage device 12 comprises a domain configuration 
storage section 121 and a service storage section 122. The 
domain configuration storage section 121 stores information 
on the operations management networks of the providers 
managed by the multi-domain service broker 1 as well as the 
corresponding connection configurations. In the case of the 
present embodiment, the operations management networks 
of the provider A and the provider B are managed by the 
multi-domain service broker 1. 

[0067] The service storage section 122 stores the services 
provided by each of the providers. In the case of the present 
embodiment, this includes network services of high quality, 
medium quality and low quality for both providers A, B. The 
data processing device 13 comprises a domain configuration 
management device 131, a security management device 133, 
a service management device 132 and an external system 
communication device 134. 

[0068] The domain configuration management device 131 
provides operations relating to the provider operations man- 
agement networks managed by the multi-domain service 
broker 1, and provides functions for registering, editing and 
deleting domain configuration information in the domain 
configuration storage section 121. The multi-domain service 
broker 1 stores domain information which has been regis- 
tered and declared from the providers in the domain con- 
figuration storage section 121, via the domain configuration 
management device 131. 

[0069] The security management device 133 performs 
authentication processing of the network service manage- 
ment devices 2 connected to the multi-domain service 
broker 1. Following confirmation of connection with the 
network service management device 2, authentication infor- 
mation is received, and if this information is then authenti- 
cated by the security management device 133, data exchange 
with the network service management device 2 proceeds. 
[0070] The service management device 132 manages the 
services which each provider is able to provide, and also 
executes the registering, editing and deleting of service 
information in the service storage section 122. The external 
system communication device 134 provides an interface for 
communication between the multi-domain service broker 1 
and the network service management device clusters 2 of 
each of the providers. 

[0071] As follows is a description of the operation of the 
present invention. In the present invention, cooperation 
between the network service management device clusters 2 
operated by different providers, and the multi-domain ser- 
vice broker 1 enables a customer to be provided with a 
quality assured network service which spans multiple 
domains. The keys in this cooperation are the bandwidth 
broker within each of the network service management 
device clusters 2, and the multi-domain service broker 1. 
[0072] The sequence for a quality assured network service 
provision system compatible with a multi-domain network 
according to the present invention, can be roughly classified 



into three main stages, (a) a service registration stage, (b) a 
service agreement stage, and (c) a service provisioning 
stage. The operation of the embodiment of the present 
invention will be described below, with reference to the 
drawings. 

[0073] (a) Service Registration Stage 
[0074] The service registration stage is a phase during 
which the network service management device clusters 2 of 
each of the providers register with the multi-domain service 
broker 1, the domain information and the information on 
services which can be provided by the operations manage- 
ment network. As a result of the processing of this stage, the 
multi-domain service broker 1 is able to collect and admin- 
ister the provider information and the service information 
for all of the connected operations management networks. 

[0075] Specifically, the processing of this service registra- 
tion stage involves the operations manager for each pro- 
vider, namely an operator, using the input and output device 
11 and inputting information relating to the services pro- 
vided by the provider, as well as the domain information 
comprising configuration information on the operations 
management network of the provider. The information relat- 
ing to the services provided by the provider and the domain 
information input in this manner is transmitted to the multi- 
domain service broker 1 via the external system communi- 
cation device 233. 

[0076] Furthermore, in this embodiment, the case is 
described where an operator inputs the service information 
and domain information for each provider, but the input of 
this information could also be carried out automatically by 
pre-programmed conditions, or updated automatically by 
message information exchanged between customers and 
each network service management device. 
[0077] When the multi-domain service broker 1 receives, 
via the external system communication device 134, infor- 
mation relating to the services provided by each provider 
and the domain information, that received information is 
stored in the service storage section 122 and the domain 
configuration storage section 121 respectively of the storage 
device 12. 

[0078] Next, operation of the service registration stage 
detailed above will be described with reference to FIG. 4. 
FIG. 4 is a flowchart showing the sequence within the 
service registration stage of the present invention. 

[0079] First, before the series of operations begins, the 
network service management device 2 confirms the man- 
agement information communication connection with the 
multi-domain service broker 1, and then following confir- 
mation, the network service management device 2 sends 
authentication information through the security management 
device 234, receives authorization for management infor- 
mation exchange with the multi-domain service broker 1, 
and then forms a logical communication path. 

[0080] Then, an operations manager or operator uses the 
input and output device 21 and inputs service information 
relating to the services the provider A is able to provide, and 
domain information comprising configuration information 
for the operations management network of the provider A 
(step Al). The input service information and domain infor- 
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mation is transmitted to the multi-domain service broker 1 
via the external system communication device 233 (step 
A2). 

[0081] On receipt of the service information and the 
domain information via the external system communication 
device 134 (step A3), the multi-domain service broker I first 
performs a check of the information content (step A4), and 
if the information is grammatically correct, stores the service 
information and the domain information in the service 
storage section 122 and the domain configuration storage 
section 121 respectively (step A5). 
[0082] In this manner, the multi-domain service broker 1 
collects domain information and service information from 
each network service management device of a plurality of 
providers, and registers this information internally. 
[0083] (b) Service Agreement Stage 
[0084] Next, in relation to the provision of actual network 
services to a customer, a service agreement stage is 
described for reaching agreement on services between 
operations management networks, in order to enable the 
provision of network services of equal quality at each of the 
interconnected providers. 

[0085] This service agreement stage corresponds with 
processing for reaching an agreement on service level by 
conducting negotiations between the multi-domain service 
broker 1 and the network service management device clus- 
ters, selecting a suitable domain for satisfying the required 
quality level, and then determining a corresponding com- 
munication route, so that when a request is received from a 
customer, network services of consistent quality can be 
provided throughout the multi-domain network. 
[0086] As follows is a description of the necessity for this 
agreement on service level. Each provider is able to specify 
a network quality level based on a variety of parameters such 
as error rate or delay value, although the level of quality 
which can be provided, and the method for specifying that 
level is generally different for different providers. For 
example, one provider may ask the customer to specify one 
of three quality levels named Gold, Silver and Bronze, 
where Gold offers the highest level of quality, whereas 
another provider may require the customer to specify a 
quality level based on parameters which may use a different 
error rate, and may offer a different number of levels (for 
example, A, B, C, D). 

[0087] Consequently, in order to ensure that the quality 
level requested by the customer is maintained at a constant 
level within a multi-domain service network, this quality 
level must be associated with one of the service levels 
offered within each provider, and a mutual agreement then 
reached. At this stage, the multi-domain service broker 1 
functions as the intermediary broker for reaching service 
agreements between each of the domains. 
[0088] As follows is a brief description of the operation of 
this service agreement stage. First, an operator at one 
provider uses the input and output device 21 of the network 
service management device 2 and inputs service information 
detailing the conditions desired for a service level agree- 
ment. This input service information is transmitted to the 
multi-domain service broker 1 via the external system 
communication device 233. On receipt of the service infor- 



mation, the multi-domain service broker 1 uses the service 
management device 132 to search the service storage section 
122, and acquires a domain ID which satisfies the conditions 
specified. 

[0089] Next, the multi-domain service broker 1 uses this 
domain ID as a key for reading the domain configuration 
information for that domain from the domain configuration 
storage section 121, and then transmits this domain infor- 
mation as a response, to the bandwidth broker 23 inside the 
network service management device cluster 2 where the 
request originated. 

[0090] When the network service management device 
which receives the response is notified of a certain domain 
by the multi-domain service broker 1, the operator uses the 
input and output device 21 and inputs the service level 
agreement information into the bandwidth broker 23. 
[0091] At this point, this service level agreement infor- 
mation transmits a message, via the external system com- 
munication device 233 of the network service management 
device 2, to the bandwidth broker 23 of the adjacent domain 
introduced by the multi-domain service broker 1, so that the 
service level agreement information is also registered in the 
adjacent domain. The processing outlined above is used to 
reach agreements relating to interconnectivity between the 
operations management networks of different providers. 
[0092] This agreement information includes information 
on the interconnected communication devices, circuitry, 
service types, and bandwidths and the like. In this manner, 
the processing of this service agreement stage involves the 
exchanging of information and the assigning of service 
levels relating to the determination of an agreement to 
enable the provision of network services at the same level of 
quality across different providers, and results in an agree- 
ment relating to service levels between providers. 
[0093] Next is a description of the specifics of the service 
agreement stage with reference to FIG. 5. The service 
agreement is made between different providers, and is a 
convention relating to the interconnectivity between opera- 
lions management networks. 

[0094] An operator at the provider A (hereafter referred to 
as the operator A) uses the input and output device 21 and 
inputs service information detailing the conditions desired 
for a service level agreement. This service information 
includes information such as service classifications for high 
priority, medium priority and low priority service. This input 
service information is transmitted to the multi-domain ser- 
vice broker 1 via the external system communication device 
233 (step Bl). 

[0095] When the multi-domain service broker 1 receives 
this service information, the service management device 132 
searches the service storage section 122, and acquires a 
domain ID which satisfies the conditions specified (step B2). 
[0096] Then, the domain configuration management 
device 131 uses this domain ID as a key and acquires the 
domain information from the domain configuration storage 
section 121. The multi-domain service broker 1 then trans- 
mits a response to the bandwidth brokeT 23 of the provider 
A (hereafter referred to as the bandwidth broker A) via the 
external system communication device 134. On receipt of 
this domain information, the bandwidth broker 23 inputs the 
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domain information into the input and output device 21. In 
the case of this embodiment, the domain of the provider B 
(hereafter referred to as the domain B) is introduced (step 
B3). 

[0097] The operator A specifies the domain B and inputs 
the service level agreement information. The service level 
agreement information includes information on service 
classes such as high priority, medium priority and low 
priority service, as well as information on required commu- 
nication quality. In this embodiment, bandwidth information 
is input. The service level agreement information is trans- 
mitted to the bandwidth broker 23 of the provider B (here- 
after referred to as the bandwidth broker B) via the external 
system communication device 233 (step B4). 

[0098] Before the transmissions from the above series of 
processing are conducted, the bandwidth broker A confirms 
the management information exchange connection with the 
bandwidth broker B, and receives authentication. This 
authentication is performed by the security management 
device 234. 

[0099] On receipt of the service level agreement informa- 
tion, the bandwidth broker B checks the content of the data. 
If there are no grammatical errors, then the service level 
agreement management section 231 inside the bandwidth 
broker B (hereafter referred to as the service level agreement 
management section B) acquires information from the ser- 
vice level agreement storage section 221 on the available 
resource capacity between the domain A and the domain B, 
and service information relating to high priority, medium 
priority and low priority service levels. If an agreement is 
possible, then a response is transmitted to the bandwidth 
broker A via the external system communication section B, 
and the service agreement information agreed upon with the 
provider A is registered in the service level agreement 
storage section B (step B5). 

[0100] The bandwidth broker A receives the response, and 
if the service level agreement request has been accepted, 
registers that agreement information in the service level 
. agreement storage section A (step B6). 

[0101] The processing outlined above is used to reach 
agreement relating to interconnectivity between the opera- 
tions management networks of the provider A and the 
provider B. This agreement information includes informa- 
tion on the interconnected communication devices, circuitry, 
service types, and bandwidths and the like. 
[0102] (c) Service Provisioning Stage 
[0103] Next, the service provisioning stage is executed. 
Service provisioning is a step where, based on a service 
order from a customer, operations are performed for setting 
and controlling information in the communication devices 
so that a service can be operated between customer networks 
via the operations management networks of a plurality of 
providers. 

[0104] This service provisioning stage can be further 
classified into three stages, namely, service order processing, 
route design processing, and provisioning processing. These 
three stages of processing are executed mainly by a cus- 
tomer care server, a design server, and a policy server 
respectively. 



[0105] The workflow server 24 controls this cluster of 
servers in accordance with the operation flows for the 
provision of network services, and the workflow server 24 
also controls the cooperative operation of the customer care 
server 25, the design server 27, the policy server 26 and the 
workflow server 24 and the like inside the network service 
management device of each domain. 
[0106] In other words, service order processing refers to 
the processing in the customer care server 25 for receiving 
and processing service order information received from a 
customer, and registering that information in the service 
storage section 226, and route design processing refers to the 
processing in the design server 27, which manages the 
internal network resources of the operations management 
network of the provider, for managing the total bandwidth, 
the used bandwidth, and the available bandwidth of the 
network circuitry, and determining an actual route depend- 
ing on the -usage status of the resources. Moreover, the 
provisioning processing refers to the processing for reading 
the policy information stored in the policy storage section 
225 by using the policy server 26, and converting this 
information to setting information for a communication 
device of a specific vendor. Provisioning for providing 
service refers to control processing performed on a commu- 
nication device 3. 

[0107] As follows is a description of processing examples 
of the service order processing, the route design processing 
and the provisioning processing from the service provision- 
ing stage. 

[0108] First, in the case of service order processing, a 
customer requests a service order from the provider A, and 
the operator A uses the input and output device 21 of the 
network service management device 2 to register this service 
order information in the customer care server 25. The 
customer care server 25 then stores the information input by 
the operator A in the service storage section 226. 
[0109] Next, in the route design processing, processing is 
performed for designing an inter domain connection route 
between domains, and for designing an intra domain route 
within the domain. Of these two, the former is equivalent to 
the processing for calculating linkages for the operations 
management networks of the providers positioned between 
the customer network of the source network through to the 
destination network, and is carried out by the multi-domain 
service broker 1. The latter is equivalent to processing for 
calculating linkages between communication devices 3 
within the operations management network of the provider, 
and is carried out by the design server 27. 
[0110] First, in order to design an inter domain connection 
route, the bandwidth broker 23 of the network service 
management device 2 transmits a request message to the 
multi-domain service broker 1 via the external system 
communication device 233. 

[0111] The multi-domain service broker 1 executes the 
inter domain route design process, and a response is then 
transmitted from the multi-domain service broker 1 back to 
the bandwidth broker 23. 

[0112] Subsequently, the design server 27 designs an intra 
domain route which will satisfy the level of communication 
quality requested. The results of this intra domain route 
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design process executed by the design server 27 are written 
to the resource storage section 224 and the policy storage 
section 225. 

[0113] In the resource storage section 224, the resource 
information is updated with the newly allocated network 
resource information produced as a result of the route design 
process.' In the policy storage section 225, the configuration 
data for setting the communication devices within the net- 
work is written as policy. 

[0114] Next, the service level agreement management 
device 231 of the bandwidth broker 23 refers to the service 
level agreement storage section 221, and checks whether or 
not the service information requested by the customer can be 
accommodated by a service agreed upon between the pro- 
vider A and the provider B. 

[0115] In those cases where the service can be accommo- 
dated, the network service management device 2 transmits a 
provisioning request message to the bandwidth broker 23 A 
of the adjacent domain, via the external system communi- 
cation device 233. 

[0116] When the bandwidth broker 23B of the adjacent 
domain receives the provisioning request, the design server 
27 of the network service management device of that 
adjacent domain calculates an intra domain route which will 
satisfy the level of communication quality requested. 
[0117] Then, as a result of this calculation process, the 
bandwidth broker 23B of this adjacent domain transmits a 
service provisioning response to the bandwidth broker 
where the request originated. In this manner, the registration 
of service orders, and the intra domain and inter domain 
design processes are executed by the service order process- 
ing stage and the route design processing stage. 
[0118] In the third stage of provisioning processing, the 
actual setting and control of the configuration information in 
the appropriate communication devices is conducted, based 
on the ronte information and the like designed in the manner 
descried above. In other words, the policy server 26 reads 
the configuration data required for the communication 
devices 3 to provide the service, from the policy storage 
section 225. Here, the object of the provisioning performed 
by the policy server 26 is the operations management 
network of the provider. 

[0119] Next the bandwidth broker 23A acquires the Jink- 
. age information for those domains which are passed through 
in order to provide the service, and then transmits a service 
provisioning request message to the bandwidth broker 23B 
of the adjacent domain. 

[0120] When the bandwidth broker 23B of the adjacent 
domain receives the service provisioning request message, 
the policy server 26 reads the policy data for that particular 
service from the policy storage section 225. Then, provi- 
sioning is executed for the communication devices 3 within 
the operations management network of the domain which 
relate to that service. 

[0121] The bandwidth broker 23 of the adjacent domain 
then transmits a service provisioning response message to 
the bandwidth broker 23 where the request originated. 
[0122] On receipt of this service provisioning response 
message from the adjacent domain, the bandwidth broker 23 



finishes processing, and a communication service which 
passes through a plurality of domains is provided. 

[0123] As follows is a detailed description of the service 
provisioning stage with reference to FIG. 6 and FIG. 7. 
FIG. 6 is flowchart showing the operations of the service 
provisioning stage of the present invention. FIG. 7 is a 
transition diagram of service status relating to the present 
invention. 

[0124] In the flowchart of FIG. 6 there are a plurality of 
execution blocks. The block labeled "decide on internal or 
external forward destination" (step CI) shown at the top of 
the diagram refers to processing performed by the band- 
width broker 23 or the workflow server 24. 

[0125] Furthermore, the blocks labeled "decide on exter- 
nal forward destination" (step C2), "admission control deci- 
sion" (step CS), "transmit service provisioning response" 
(step C3), "receive service provisioning response" (step C4), 
"transmit service provisioning request" (step C6), and 
"receive service provisioning request" (step C7), shown 
down the left hand side of the diagram refer to processing 
performed by the bandwidth broker 23. 

[0126] The block labeled "design inter domain route" 
(step C8) is performed by the multi-domain service broker 
1. The block labeled "decide on internal forward destina- 
tion" (step C9) shown on the right of the diagram is 
performed by the workflow server 24. The block labeled 
"receive service" (step CIO) is executed by the customer 
care server 25, whereas the blocks labeled "design intra 
domain route" (step CU) and "provisioning" (step C12) are 
executed by the design server 27 and the policy server 26 
respectively. 

[0127] Moreover, at the provisioning stage, the status of 
the services provided to customers in each of the domains is 
managed. FIG. 7 shows a transition diagram for service 

[0128] First, a customer places a service order request with 
the provider A. The service order includes information on 
the location of the customer network arid information on the 
communication quality. In this embodiment, service classes 
such as high priority and the like and required bandwidth 
values are declared for the customer network E and the 
customer network D. 

[0129] In the following description, the situation is 
described where the multi-domain service broker 1 selects 
the provider B as the provider which can provide the desired 
communication service for the received service order at the 
provider A. Furthermore, in the description, the functional 
devices and blocks which correspond with those shown in 
the configurations of FIG. 2 and FIG. 3 are labeled with the 
same numerals, although the letters A and B are added to 
indicate the appropriate provider. 

[0130] In the provider A, the received service order infor- 
mation is registered in the customer care server 25Aby the 
operator A, using the input and output device 21 A. The 
customer care server 25A performs a grammatical check of 
the data, and if the data is grammatically correct, stores the 
data in the service storage section 226A (step C10 of FIG. 
6). Furthermore, the service status is stored as "Accepted" 
(state Dl of FIG. 7). 
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[0131] Next, a decision is made by the workflow server 
24A to specify either an internal or an external forward 
destination (step CI). 

[0132] As shown in FIG. 9, this decision on an internal or 
external forward destination is executed by referring to the 
service status stored in the service storage section 226A, 
using logic incorporated in the sever or the system as the 
program control. FIG. 9 is a logic diagram for deciding on 
either an internal or an external forward destination. FIG. 10 
is a logic diagram for deciding an external forward desti- 
nation, and FIG. 11 is a logic diagram for deciding an intra 
domain forward destination. 

[0133] The logic for deciding a forward destination uses 
the service status, operation results, and the location of 
linkage between each of the providers interconnected in 
order to provide the service. The status of the service 
received from the customer is managed according to the 
service status transition diagram shown in FIG. 7, and the 
status of intra domain route design and service provisioning 
can be obtained in terms such as non-executed, successful or 
failed. These states are managed by the respective servers, 
although a configuration is also possible where a device is 
provided within a separate network service management 
device for collectively managing the aforementioned service 
status for each device cluster, with each of the servers then 
writing to, or referring to this device as necessary. Because 
the trigger for causing a transition in status is the execution 
of an operation in a device such as the customer care server, 
the design server or the policy server shown in FIG, 2, by 
referring to the service status, the server requiring process- 
ing can be determined. 

[0134] Furthermore, location within the domain linkage is 
classified into three sections, namely the source domain, a 
middle domain, and the destination domain. The source 
domain refers to the provider network connected with the 
source network of the customer. The destination domain 
refers to the provider network connected with the destination 
network of the customer. The middle domain refers to a 
provider network located between the source domain and the 
destination domain which provides network resources to the 
customer. For example, in the case where three providers A, 
B, C exist, and the provider A accommodates the source 
network of the customer and the provider C accommodates 
the destination network of the customer, then the provider B 
is the middle domain. This information is identified and 
managed within the network service management device. 
[0135] Furthermore, there are three possible operation 
results, namely "Undefined", "OK" and "NG". The result 
"Undefined" describes non-execution of the operation, 
"OK" describes a successful operation, and "NG" describes 
an operation failure. 

[0136] In the logic for deciding on either an internal or ah 
external forward destination according to the workflow 
server 24A, in the case where the current domain is the 
source domain AND the service status is "Accepted" AND 
the inter-domain route has not been designed, processing is 
transferred to the external system (logic LI). Here, an 
external system refers to an external device outside of the 
internal processing server cluster of the network service 
management device, and so processing transfers from the 
workflow server 24A of the provider A to the bandwidth 
broker 23A. 



[0137] Then, the bandwidth broker 23A receives the pro- 
cessing and makes a decision on an external forward desti- 
nation (step C2). At this point, the current domain is the 
source domain AND the service status is "Accepted" AND 
the inter-domain route has not been designed, and so the 
processing transfers to inter-domain route design (logic 
Lll). In other words, a processing transfer request message 
is transmitted to the multi-domain service broker 1 via the 
external system communication device 233A. 
[0138] Next, the multi-domain service broker 1 executes 
the inter-domain route design process (step C8). In the 
inter-domain route design process, the domain configuration 
management device 131 and the service management device 
132 refer to the domain configuration storage section 121 
and the service storage section 122 respectively and design 
a domain linkage which will satisfy the service requested by 
the customer. 

[0139] Here the domain linkage refers to the provider 
network linking the source network of the customer network 
with the destination network. Following completion of the 
inter-domain route design, a response is transmitted from the 
multi-domain service broker 1 to the bandwidth broker 23A 
of the provider A. 

[0140] The bandwidth broker 23A of the provider A then 
receives the aforementioned processing and makes a deci- 
sion on either an internal or an external forward destination 
(step CI). At this time, the current domain is the source 
domain AND the service status is "Accepted" AND the 
inter-domain route has already been designed, and so the 
processing transfers to the internal system (logic 12). In 
other words, processing transfers to the workflow server 
24A of the provider A- 

[0141] Subsequently, the workflow server 24A makes a 
decision on an internal forward destination (step C9). At this 
point, the current domain is the source domain AND the 
service status is "Accepted" AND the inter-domain route has 
already been designed AND the operation result from the 
current domain is "Undefined", and so the processing trans- 
fers to intra domain route design (logic L31). In other words, 
the design server 27 designs an intra domain route which 
will satisfy the required communication quality (step Cll). 

[0142] The result of the intra domain route design process 
executed by the design server 27 is written into the resource 
storage section 224 and the policy storage section 225. In the 
resource storage section 224, the resource information is 
updated with the newly allocated network resource infor- 
mation from the design process. For example, if in a 
bandwidth of 10 Mbps, 13 Mbps is used and a further 1.5 
Mbps is newly allocated, then this amounts to 3.0 Mbps of 
resource being allocated. In the policy storage section 225, 
the configuration data for setting the communication devices 
3 within the network is written as policy. 
[0143] Next, the workflow server 24A of the provider A 
makes a decision on either an internal or an external forward 
destination (step CI). At this point, the service status from 
the source domain to the current domain is "Intra domain 
Allocated" AND the service status from a downstream 
domain to the destination domain is "Undefined", and so the 
processing transfers to the external system (logic L3). In 
other words, the processing transfers to the bandwidth 
broker 23A. 
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[0144] Subsequently, the bandwidth broker 23A decides 
on an external forward destination (step C2). At this point, 
the current domain is not the destination domain AND the 
service status from the source domain to the current domain 
is "Intra domain Allocated" AND the service status from the 
downstream domain to the destination domain is "Unde- 
fined", and so the processing transfers to the admission 
control decision process (logic L22, step C5). 
[0145] In the case of this embodiment, the linkage 
between the operations management networkof the provider 
A and the operations management network of the provider B 
is determined around service to the customer, and so the 
service level agreement management device 231 A of the 
provider A refers to the service level agreement storage 
section 221A and checks whether or not the service infor- 
mation requested by the customer can be accommodated by 
the services agreed upon between the provider A and the 
provider B. In those cases where such accommodation is 
impossible, an error message is displayed on the input and 
output device 21A and the processing ends. In those cases 
where the service can be accommodated, a service provi- 
sioning request is transmitted to the bandwidth broker 23B 
of the provider B (the bandwidth broker B) via the external 
system communication device 233A (step C6). 
[0146] On receipt of the service provisioning request (step 
C7), the bandwidth broker 23B executes the logic for 
deciding on either an internal or an external forward desti- 
nation (step C 1). At this point, the current domain is not the 
source domain AND the service status of the current domain 
is "Accepted" AND the operation result is "Undefined", and 
so the processing transfers to the internal system (logic L4). 
In other words, the processing transfers to the workflow 
server 24B. 

[0147] The workflow server 24B then executes the logic 
for deciding on an internal forward destination (step C9). At 
this point, the current domain is the source domain AND the 
service status is "Accepted" AND an inter-domain route has 
already been designed AND the operation result from the 
current domain is "Undefined", and so processing transfers 
to intra domain route design (logic L31). 
[0148] Next, the design server 27B designs an intra 
domain route which will satisfy the required communication 
quality (step Cll), and then transfers processing to the 
workflow server 24B. 

[0149] The workflow server 24B then executes the logic 
for deciding on either an internal or an external forward 
destination (step CI). 

[0150] At this point, the current domain is not the source 
domain AND the service status for all domains is "Intra 
domain Allocated", and so processing transfers to the exter- 
nal system (logic L5). In other words, the processing trans- 
fers to the bandwidth broker 23B. 
[0151] Subsequently, the bandwidth broker 23B executes 
the logic for deciding an external forward destination (step 
C2). The domain route management device 232B inside the 
bandwidth broker 23B acquires, from the domain configu- 
ration storage section 222B, the domain linkage information 
needed to achieve the service to be provided to the customer. 
In the case of this embodiment, the linkage between the 
operations management network of the provider A and the 
operations management network of the provider B is regis- 



tered, and so a service provisioning response is transmitted 
to the network service management device cluster 2A 
namely to the bandwidth broker 23A (step C3). 
[0152] On receipt of the service provisioning response 
from the bandwidth broker 23B via the external system 
communication device (step C4), the bandwidth broker 23 A 
executes the logic for deciding on either an internal or an 
external forward destination (step CI). 
[0153] In the case of this embodiment, at this point the 
current domain is the source domain AND the service status 
for all domains is "Intra domain Allocated", and so process- 
ing transfers to the internal system (logic L6). In other 
words, processing transfers to the workflow server 24A via 
the internal system communication device of the bandwidth 
broker 23A. 

[0154] Next, the workflow server 24A decides on an 
internal forward destination within the network service 
management device cluster 2A (step C9). At this point, the 
current domain is the source domain AND the service status 
for all domains is "Intra domain Allocated", and so the next 
process is provisioning (logic L32). In other words, pro- 
cessing transfers to the policy server 26A. At this time, the 
objective service ID is passed from the workflow server 24A 
to the policy server 26 A. 

[0155] The policy server 26A uses the service ID as a key 
and reads the configuration data for the communication 
devices required for providing the desired service from the 
policy storage section 225A. In the case of this embodiment, 
the policy server 26A conducts provisioning on the opera- 
tions management network of the provider A. 
[0156] Next, the policy server 26A converts the read 
policy data to configuration data specific to the communi- 
cation device, and executes provisioning (step C12). Typi- 
cally, setting commands and data for the communication 
device 3 will vary depending on the maker of the commu- 
nication device, but policy data is configuration data which 
is independent of each communication device. 
[0157] Consequently, the policy server converts the policy 
data into setting commands and data which correspond with 
each of the communication devices, and then executes 
provisioning.' If provisioning succeeds, then the service 
status of the current domain is changed from "Intra domain 
Allocated" to "Provisioned", and then stored in the service 
storage section 226. Furthermore, the operation result for the 
current domain provisioning is subsequently treated as 
"OK". 

[0158] Once the policy server 26A has executed provi- 
sioning, the processing transfers to the workflow server 24A, 
and a decision is made on either an internal or. an external 
forward destination (step CI). In the case of this embodi- 
ment, at this point the service status from the source domain 
to the current domain is "Provisioned" AND the service 
status from the downstream domain to the destination 
domain is "Intra domain Allocated", AND the operation 
result for the downstream domain is "Undefined", and so the 
processing transfers to the external system (logic L7). In 
other words, the processing transfers from the workflow 
server 24A to the bandwidth broker 23A. 
[0159] Next, the bandwidth broker 23A executes the logic 
for deciding an external forward destination (step C2). In 
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this embodiment, at this point the current domain is not the 
source domain AND the service status for all the domains is 
"Intra domain Allocated", and so the next process is the 
service provisioning request transmission process (logic 
L23). 

[0160] The bandwidth broker 23A acquires, from the 
domain configuration storage section 222A, the linkage 
information for those domains which are passed through in 
order to provide the service. In the case of this embodiment, 
the linkage is between the operations management network 
of the provider A and the operations management network of 
the provider B, and so the bandwidth broker 23A transmits 
a service provisioning request message for transferring the 
processing to the bandwidth broker 23B (step C6). 
[0161] On receipt of the service provisioning request 
message (step C7), the bandwidth broker 23B checks 
whether or not the message is grammatically correct. 
[0162] If the message is grammatically correct, then the 
bandwidth broker 23B executes the logic for deciding on 
either an internal or an external forward destination (step 
CI). At this point, in this embodiment, the service status 
from the source domain to the upstream domain is "Provi- 
sioned" AND the service status from the current domain to 
the destination domain is "Intra domain Allocated", AND 
the provisioning operation result for the current domain is 
"Undefined", and so the processing transfers to the internal 
system (logic L8). In other words, the processing transfers to 
the workflow server 24B via the internal system communi- 
cation device 235. 

[0163] The workflow server 24B then executes the logic 
for deciding on an internal forward destination within the 
network service management device cluster B (step C9). 
[0164] In the case of this embodiment, at this point the 
service status from the source domain to the upstream 
domain is "Provisioned" AND the service status from the 
current domain to the destination domain is "Intra domain 
Allocated", AND the operation result for the current domain 
is "Undefined", and so the next process is provisioning 
(logic L33). In other words, processing transfers to the 
policy server 26B. At this time, the service ID which is the 
object of the provisioning process passes to the policy server 
26B. 

[0165] The policy server 26B uses the service ID as a key 
and reads the policy data for the service from the policy 
storage section 225B. The policy server 26B then executes 
provisioning on those communication devices 3 within the 
operations management network of the provider B which 
relate to the service, and then updates the service status 
based on the results of the provisioning. If the provisioning 
succeeds, then the service status is changed to "Provisioned" 
and the processing transfers to the workflow server 24B. 
[0166] The workflow server 24B of the provider B then 
executes the logic for deciding on either an internal or an 
external forward destination (step CI). In the case of this 
embodiment, there are multiple domains AND the current 
domain is not the source domain AND the service status of 
all the domains is "Provisioned", and so the processing 
transfers to the external system (logic L9). In other words, 
the processing transfers from the workflow server 24B to the 
bandwidth broker 23B. 



[0167] On receipt of the message from the workflow 
server 24B, the bandwidth broker 23B executes the logic for 
deciding an external forward destination (step C2). In this 
embodiment, at this point the current domain is not the 
source domain AND the service status for all the domains is 
"Provisioned", and so the next process is the service provi- 
sioning response transmission process (logic L25). 
[0168] The bandwidth broker 23B acquires the domain 
linkage information needed to achieve the service from the 
domain configuration storage section 222B. In this embodi- 
ment the upstream domain from the operations management 
network of the provider B is the provider A, and so the 
bandwidth broker 23B transmits a service provisioning 
response message to the bandwidth broker 23 A via the 
external system communication device 233 (step C3). 
[0169] On receipt of the service provisioning response 
message from the bandwidth broker 23B (step C4), the 
bandwidth broker 23A executes the logic for deciding on 
either an internal or an external forward destination (step 
CI). In the case of this embodiment, there are multiple 
domains AND the current domain is the source domain AND 
the service status of all the domains is "Provisioned", and so 
the processing transfers to the internal system (logic L10). In 
other words, the processing transfers from the bandwidth 
broker 23A to the workflow server 24A. 
[0170] Next, the workflow server 24A executes the logic 
for deciding on an intra domain forward destination (step 
C9). In the case of this embodiment, at this point the current 
domain is the source domain AND the service status of all 
the domains is "Provisioned", and so the processing finishes 
(logic L34). 

[0171] As described above, by making the network service 
management device cluster 2A of the provider A and the 
network service management device cluster 2B of the pro- 
vider B cooperate in the execution of a service registration 
stage, a service agreement stage and a service provisioning 
stage, network service can be provided via a plurality of 
domains. 

What is claimed is: 

1. A quality assured network service provision system 
compatible with a multi-domain network, wherein 

a communication network comprising a plurality of 
operations management networks (domains) which are 
connected to a plurality of customer networks with user 
terminals and which are managed by different provid- 
ers, includes: 

a network service management device for managing col- 
lectively device clusters incorporated within an opera- 
tions management network of each of said providers, 
and receiving service orders and faults information 
from customers; and 

a service broker device at the functional host layer of said 
network service management device cluster for provid- 
ing a broker function for achieving agreement between 
said plurality of providers. 

2. A quality assured network service provision system 
compatible with a multi-domain network according to claim 
1, wherein 

said network service management device comprises an 
outputting device for putputting information on ser- 
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vices which can be provided by each of said providers 
and domain information to said multi-service broker; 

said service broker device comprises a device for storing 
output information from each network service manage- 
ment device, selecting a network service management 
device of a domain which will satisfy a required quality 
level when a network service request is generated by a 
customer, and issuing instructions for introducing and 
setting necessary information. 

3. A quality assured network service provision system 
compatible with a multi-domain network according to claim 
- 2, wherein - - — — 

said network service management device comprises an 
input and output device for input, by an operator, of 
information on services which can be provided by said 
provider and domain information made up of configu- 
ration information about an operations management 
network of said provider; 

storage devices for storing information input from said 
input and output device by information type; 

a workflow server for determining transfer destinations 
for processing commands based on each service request 
from a customer; 

a bandwidth broker for registering said domain informa- 
tion and service information in said service broker 
device, and determining, in cooperation with said 
workflow server, a subject for executing a subsequent 
process; and 

an internal processing system for performing processing 
management of information required by said commu- 

4. A quality assured network service provision system 
compatible with a multi-domain network according to claim 

2, wherein 

said service broker device comprises a storage device for 
storing service information and domain information 
received from said network service management 
device; and 

a data processing device for performing information pro- 
cessing such as writing and reading of information to 
and from said storage device, as well as providing a 
security management function relative to said band- 
width broker. 

5. A quality assured network service provision system 
compatible with a multi-domain network according to claim 

3, wherein 

said bandwidth broker and said workflow server have a 
means for deciding, based on logic, whether a subject 
for executing a subsequent process due to a customer 
service request is in an external system or an internal 
system; and 

said bandwidth broker has a means for deciding a domain 
in cases where a subject for executing a subsequent 
process is in an external system; and 

said workflow server has a means for deciding an internal 
processing system of a forward destination in cases 
where a subject for executing a subsequent process is in 
an internal system. 



6. A quality assured network service provision system 
compatible with a multi-domain network according to claim 
3, wherein 

said service broker device has a means for referring to 
service information stored in said service storage sec- 
tion and deciding whether a subject for executing a 
subsequent process due to a customer service request is 
in an external system or an internal system; 

a means for deciding an external forward destination in 
cases where a subject for executing a subsequent pro- 
cess is in an external system; and 

a means for deciding an internal processing system of a 
forward destination in cases where a subject for execut- 
ing a subsequent process is in an internal system. 

7. A quality assured network service provision system 
compatible with a multi-domain network according to claim 
3, wherein 

said internal system comprises any one of a customer care 
server for managing service order information received 

a design server for managing network resources of an 
operations management network of a provider, 

a policy server for reading pre-recorded policy informa- 
tion, as well as converting said policy information into 
setting information for a communication device of a 
specific vendor, and performing provisioning of a com- 
munication device for the provision of a service, and 

a network management device for providing a network 
fault management function for a configuration manage- 
ment and open channel incorporating communication 
devices within an operations management network of a 
provider and connection configuration of circuitry for 
connecting said communication devices, each of which 
is connected to said workflow server. 

8. A method of providing a quality assured network 
service compatible with a multi-domain network comprising 

a plurality of domains which are connected to a plurality 
of customer networks with user terminals and which 
are managed by different providers, and incorporating 

a network service management device for controlling 
collectively device clusters incorporated within an 
operations management network of each of said pro- 
viders, as well as receiving service orders and faults 
information from customers, and 

a service broker device at the functional host layer of said 
network service management device cluster for provid- 
ing a broker function for achieving agreement between 
said plurality of providers, wherein said method com- 

a service registration step in which a network manage- 
ment device of each provider registers in said service 
broker device, domain information comprising con- 
figuration information and information on services 
which can be provided, 
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a service agreement step in which a request is received 
from a customer, said service broker device and said 
network management device reach an agreement relat- 
ing to service conditions for providing a service which 
will satisfy a required quality level, and route informa- 
tion for an appropriate domain and a network manage- 
ment device are selected, and 
a service provisioning step for performing required ser- 
vice provisioning on a communication device based on 
service conditions and route information agreed upon 
in said network management device. 
9. A method of providing a quality assured network 
service compatible with a multi-domain network according 
to claim 8, wherein said service provisioning step further 



comprises a step for service order processing, a step for 
route design processing, and a step for provisioning pro- 
cessing. 

10. A service broker device in an interconnected network 
for providing, in a network comprising a plurality of opera- 
tions management networks which are connected to a plu- 
rality of customer networks with user terminals and which 
are managed by different providers, 

a broker function for achieving agreement between a 
plurality of providers based on configuration informa- 
tion and information on the services which can be 
provided by each provider network. 
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The invention relates to a system for managing 
telecommunications networks, the system having one or 
5 more network information management modules (IM1/IM2) , 
and one or more user service modules (USM) . According to 
the invention, the management system is fitted with 
software architecture including an interface (f) suitable 
for supporting one or more user presentation layers (CP) 
10 for a user services management module (USM) . 
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The following statement is a full description of this invention, including 
method of performing it known to us: 



1 



A SYSTEM FOR MANAGING A TELECOMMUNICATIONS NETWORK 

The invention relates to a system for managing a 
telecommunications network. 

It is known that a telecommunications network is 
5 constituted by the assembly of hardware and of software 
enabling paying users to communicate. Such hardware 
naturally includes user telecommunications terminals 
which can equally well be stationary or mobile terminals. 
There are also systems for accessing the network, 
10 switching centers, and centers for managing the network. 

The ■ invention • applies to any type of 
telecommunications network, whether stationary or mobile. 

Attention is given below more particularly to 
centers for managing a telecommunications network, also 
15 referred to as the operation system (OS) . These centers 
enable the operator of a telecommunications network to 
manage the network and to configure it. 

It is known that a telecommunications network 
management center is structured as five functional 
20 blocks, F, A, C, P, and S, specifically for managing 
faults F, configuration C, information about payload A, 
performance (quality, throughput) P, and security S. 



A management center does not operate in real time 
relative to the communications network itself. There is 
no need for the management center to penetrate into the 
network on each occasion that a telephone call needs to 
be set up. However, these centers serve to extract 
information from the network or to input information into 
the network each time it is necessary to take action for 
surveillance or reconfiguration, depending on the problem 
encountered . 

Links between the management centers OS and the 
various elements of the telecommunications network have 
been standardized by the ITU. These recommendations are 
defined in a series known as .M and a series known as X, 
where M relates to the practical aspects and X relates to 
communications protocols and implementation. 

Mention can be made mainly of the ITU-T M3 010 
standard which describes a concept known as TMN: 
Telecommunications Management Network. The operational 
architecture of such TMN is shown in Figure 1. According 
to the standard, a TMN can include several types of 
operational assemblies, some of which are optional: 

. OSF (Operation System Function) 

. WSF (Work Station Function). 

. MF (Mediation Function) 

' QAF (Q Adaptor Functions) 

. NEF (Network Element Function) 

All these functions will not be described in detail 
since some of them are not within the scope of the 
present invention. 

The management center proper is conventionally 
constituted by the OSF and WSF functions. The OSF 
functions . The management application proper is in the 



OSF assembly and the operator interface and presentation 
function assemblies are in the WSF assembly. 

All these functional assemblies can transfer 
information to and from each other via interfaces. 
According to the standard, interfaces of the f type link 
the functional assemblies of the WSF type to the 
functional assemblies of the MF and OSF types. 
Interfaces of the q3 type make it possible to link the 
functional assemblies of the OSF type to the functional 
assemblies of the OSF, MF, QAF and NF types. Interfaces 
of the qx type make it possible to link functional 
assemblies MF to functional assemblies of the MF, QAF and 
NF types. 

Eventually, x, q and m interfaces make 
communications with the outside of the TMN possible from 
the OSF, WSF and QAF assemblies, respectively. 

Interface q (also called "reference point q" is 
defined by a language for modelling the interface since 
it is dependent of each of the elements of the managed 
network. According to the standard, this description 
language is the GDMO language (Guideline for the 
Definition of Managed Objects) . The ASN.l language 
(Abstract Syntax Notation 1} can -also be used for the 
definition of data. 

For the f interface, the recommendations are 
general. No real specification is provided stating how 
the interface F should be implemented. 

Thus, the state of the art often consists in basing 
the user interface functions (WSF) directly on the 
interfaces q. 

Unfortunately, q interfaces are not designed to 
support the user presentation layers (operators) of WSF 



functional assemblies. The q interface is designed for 
dialogs between management systems. 

Basing operator interfaces directly on the q 
interface leads to the following drawbacks: 

- The semantic distance between the definitions of 
objects at the q interface and their representation is 
very large, so the cost of developing such a function is 
very high. As a result, changing the type of 
representation is very expensive. 

- The WSF function becomes totally dependent of the 
system. In other words, having the same implementation 
of the WSF function become common to a plurality of 
applications which cannot be linked by a q interface is 
not easily achievable. 

The standard defining the ITU-T M3010 TMN 
(Telecommunication Management Network) architecture 
defines a presentation interface for network management 
systems known as the f interface. However, as already 
mentioned, that standard says little as to the formal 
definition of the interface. 

Management systems based on TMN architecture do not 
implement the f interface. User interfaces are directly 
linked to the q interface which is described, as 
mentioned above in the GDM0/ASN.1 language, and thus with 
the above-mentioned drawbacks. In practice, it is 
necessary to develop as many USM user interface modules 
(for User Management System) implementing an OSF function 
as there are desired presentation layers with a q 
interface. 



According to a first aspect of the present invention there is 
provided a telecommunications network management system 
comprising one or more network information management modules 
, and one or more user service modules , wherein the system 
includes a software architecture having an interface suitable 
for supporting one or more user presentation layers for a user 
services management module, and the software architecture 
includes a mediation layer between the interface supporting 
the user presentation layers, and the information management 
module . 

In practice, an additional interface corresponding 
to the f interface of the TMN telecommunications 
management network is preferably introduced in the user 
service manager USM module (User Service Manager) . 

The interface is constructed on the basis of needs 
common to all of the presentation modes, its model is 
linked to the external representation of the entities 
managed by the system. A single software layer for 
mediation between the f interface and the q interface is 
provided and shared between all of the user presentation 
modules . 

Other features and advantages of the invention will 
appear on reading the following description which is 
given by way of non- limiting example and with reference 
to the accompanying drawings, in which: 

Figure 1, described above, is a general diagram 
illustrating the functional assemblies of a 
telecommunications management network (TMN) ; 

Figure 2 is a general block diagram of a management 
system of the invention; and 

Figure 3 is a detailed block diagram of the 
software architecture of the invention. 

As shown in Figure 2, a network information 
management module IM1 can be' linked to another network 



information management module or to a network element NE 
via a reference point q (i.e. a q interface as defined 
above) . 

These two management modules IM1 and IM2 
respectively implement tow functions 0SF1 and 0SF2 
(arbitrarily shown as two bounding boxes. 

The figure also shows a user interface module USM. 

In accordance with the invention, and for the 
reasons mentioned above, it is proposed to fit the 
management system with a software architecture that 
includes an f interface suitable for supporting one or 
more user presentation layers CP of a user services 
management module USM. 

The software architecture also includes a mediation 
layer OM between the f interface supporting the user 
presentation layers CP and the information management 
module IMl which is linked to the user services 
management module USM. 

in practice, the f interface corresponds to a 
standardized' f interface of a TMN network. By way of 
example it can be introduced into the software module 
USM. The interface is constructed on the basis of the 
needs that are common to all of the presentation modes 
and its model is linked to the external presentation of 
the entities managed by the system. 

The mediation . layer OM between the f interface and 
the q interface is single and shared by all of the user 
presentation modules or "presentation handlers". 

Figure 3 is a diagram showing the software 
architecture of the invention in greater detail. 
Elements already shown in Figure 2 can be found in this 
Figure 3 . 



The information from a q interface is, for 
instance, transported by the CMIP protocol (Common 
Management Information) and modelled using the language 
known as GDM0/ASN.1 which is a language from the 
telecommunications field, and the information is received 
by the mediation layer OM. 

Level 1 of the mediation layer manages data 
interchange with the q interface. 

Thereafter, levels 2 and 3 serve respectively to go 
from the QM model of data representation to the FM model, 
and from the FM model of data representation to the QM 
model. FM model means the data model used for performing 
the interchange of data via an f interface. Similarly, le 
QM model is the data model used for the q interface. 

Level 4 defines the data representation FM model of 
the f interface. According to embodiments of the 
invention, this can be a representation of information 
based on the CORBA or CORBA-IDL languages (Interface 
Description Language) or on function calls in the C++ 
language . 

Thus, the mediation layer OM, in addition to making 
the transformation of data representation models can make 
protocol translations. 

For instance, it can translate between the CMIP 
protocol and the HOP protocol or all of the protocols 
based on technologies of the CORBA type as well as those 
defined by the OMG (Open Management Group). 

To this end, the mediation layer OM concatenates 
the inheritance levels of the GDMO language and 
transforms ASN.l types into base type, and vice versa. 

The f interface preferably supports a plurality of 
types of user presentation layer. 



In one embodiment, the user presentation layers can 
be integrated in the mediation layer OM. 

In another embodiment, the user presentation layers 
can be integrated . in the user service management model 
USM, as shown in Figure 3. 

in the embodiment shown, the f interface supports 
the following user presentation layers: 

- a direct graphics interface G; 

- a script language S enabling users to describe 
their own macro-instructions FS1 or macro- instructions 
stored in files FS2 via a user interface IU; and 

- an access AR to Internet or Intranet computer 
networks or to any client application via the HOP 
communications protocol. 

The F interface also supports a presentation layer 
such as an agenda function A. 

A link to a journalisation module F_Log, can be 
added to the mediation layer OM, the aim of this module 
being making it possible to store the translations 
carried out by this layer. 

The above -described software architecture makes it 
possible to provide open modules for user services 
management USM. 



Claims 



A telecommunications network management system comprising one or more network 
information management modules , and one or more user service modules , wherein the 
system includes a software architecture having an interface suitable for supporting one 
or more user presentation layers for a user services management module, and the 
software architecture includes a mediation layer between the interface supporting the 
user presentation layers, and the information management module. 
A network management system according to claim 1, wherein the mediation layer 
enables interchanges to be performed between a CMIP protocol supporting a 
representation of information based on the GDMO/ASN.l language, and a protocol 
based on the CORBA technology supporting a representation of information based on 
the CORBA or IDL languages. 

A network management system according to claim 2, wherein the mediation layer serves 
to concatenate the inheritance levels of the GDMO language and to transform ASN.l 
types into base type, and vice versa. 

A network management system according to any one of the preceding claims wherein 

the interface supports one or more types of user presentation layers. 

A network management system according to any one of the preceding claims , wherein 

the user presentation layers are integrated in the mediation layer. 

A network management system according to any one of the preceding claims , wherein 

the user presentation layers are integrated in the user services management module. 

A network management system according to any one of the preceding claims, wherein 

the interface supports: 

a direct graphics interface; 

a script language enabling users to describe their own macro-instructions; and 
an access to computer networks via the HOP protocol. 
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8 A network management system substantially as hereinbefore described with reference to 
figure 2 or 3 of the accompanying drawings. 

Dated this 26th day of August 1999 
Alcatel 
by its attorneys 
Freehills Patent Attorneys 
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[ o o 4 7 ] m 6 teH 5 oflMttrMMIK iot*t PB 
[0 0 4 8] ^HWWMUflSittWi - *. 4*** *0 

ii s ei, E2, e 3-fi'g-a©'<'^>' h^*t>-ras, 
r.ixe>©-i''<y h}iov>Tl*^xS©Hi ofeitffli i 

20 £#l8UTf£L<&9§-t-5. 

[0 04 9] H 6 K&^T P - i pit, VPNt-tf^ 
©^^^ilPStfcS. C-ipl, C-ip2 
ii, VPNf- trxcoA^-rffljoI PSSTfctK P- 
i pfc«tt£*tt^3. £©P- i pfc:tt1«ft©VPN 

ic, ±eovPNf- tf*4fi, 

I P«Cov^t, trm Pm&4r*x?-*IP 

I PPa»5>fifcS£«:4 LT 1 oc0{£^*^^^ I P$ 
30 «r£3W5. R#««fc*-3<?— ^©rtTMbft. 
[0 0 5 0] */!??ir^CE«, #VPNf-M 
©#*;?v I P$|4> VPNt-f^©/n^^IP 
iP4Sri6®£-fSfc*©€-VPN-^'-tf , ^©*^^^ffl)l© 
I P«®r-fo5o *fcPEf*s *<OCE4gggE-f- 5^ V 
PNU— bTX©^n/Cf^«I P»«-C*>5. 
[00 5 1] ^nA^^fflfil^TAP-NMSl 2 
tt. 7vs<4?Ml Pifitfcot I Pffl©g£m»l»« 
g-CS>5, *©P-NMS12fc ^u/W^IPiSi 
38*1/1 P^©il^«©g«t»4«:fT5o 
40 [0 0 5 2] *^?-7if l-^fAC-NMS 1 3 

i p$f-?i)ot i p^(onm®Jt»«a 

-efo5„ COC-NMS13tt, ppwaff 
!Kia©ga4SiJ»4SrS5. 
[0 0 5 3] CJxibroP-NMS 1 2*5«t^C-NMS 

i 3 ici^xtt, 'gmznz^z i p^®4 i p^©^ 

ilZWs^frh&o wCiCC-NMS 1 3i4, C'E0>H& 
4SlJ®aSFr^-C*><5, *fc, P-NMS12tj, C-N 
MS 1 3M*'bL<i*PESS-e, CEejfiatlH** 

50 TO-?**. 
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[ 0 0 5 4 ] &%m-V&, C- i pffliCKfiSftSC 
EKMLTVPNf— fcf^©ftiJ®trWS6i:-f-5VPNU- 
-t:'*-^-i^2&, P-NMS 1 2{C^E-tS« 

[0 0 5 5] VPNf— e*WB##, 

V P Nf— If 2 CfflJ; 9 (W«IT? * 5fc» 
©, VPNf— fc?*ai— 5J t yh3^C-NMS 1 3fc 

[0 0 5 6] ±|BVPNf— K'^^-i^&.fctfV 
PNf— f^-i^V h 3 fit, VPNf— tr^^x 

[00 5 7] 17SVP Nf — tr^*#T-^/W«r0* 

[0 0 5 8] VPNf- lf^-=?^— 5?-* 21*, VPNf 
-tr^fcgflt-Sf— #@©VPNf— 
b^^frx-T'/H 4 t IT, VPNf- Vf^— 5?* 
Vh3fc»«W*. a^-vflllCTVPNf— 
©SHEWfcWS£Lfci#. VPNf— If^ai-^y 

h3tt*©f— L-C*©SGJE«**V 
PNf- 2fc«MI U VPNf— fcT*^ 

*-i^2«, 7usU ymVmi'XTJx 1 2 Sr^-L 

[005 9] H8CP-i p»±t>L<f±P- 

NMS12fc, ;©VPNt-^#f-^H4^ 
I2S£*t£« rfflVPNt-W^ttf-^H 4ii 
ii , VPNf-W*^?? ©ISS'i-f-fc' «t t>*S * * 
▼WIDSttifctV^VPNiaffi:, VPN©Pf» 
A («A~«Z) T?*>ori!S*#^^^*te««* 
*vO ^ * * * ^ y i*C E ©»J©fc»© C Ef^iJ* 
t, VPNf— f*#**^a5£3e-f*3r.4©-c£sv 
PNf— &VPNf— br*&#« 

B»ki»«;u-ca«EK36Sixtv^8aftofl[i. vpn 
#*©««« («Effl-rs»««D t, - 

■fit* ^^iS'^i/B^^t^vpNt-^ 

u VPNf— 

©*ta*fcttl PJHWtWBKJSXTVPNf— tf*ft# 
*B#iIiin-lM*S;ft3»£fc*5. fcfcdtifevPN 
f— e-^*fjajiaf±, VPNf— f^SrSSlfSaflMfc 

ts ^SS^*^^i±±|E^©5fe«©fi^i*ft*< 
*S. i ^ 5 V P Nf - lf**###J»iS 

ftSsK *fct*$lc. tt*HHKA*©*JlBlft&Bt' v t' 
&£Wic««&75 s Xr§5, *ffllSl(fa*4^5VPN 
f— t^*#Srii»Pi- 5 Ci t ^-et 5. 
[00 6 0] ±13© J; 5 tav P Nt-Wftf-^ 
1 4S::frfc£*T\ VPNf— bf*v*— ^2iVP 
Nf— tr^x-i?3i>h3 4:*MeZfc3«»i-5. -©» 
«©&feiC, dtbfeVPNf— tfJ*^*--5?-*-2£VP 
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[006 1] HSttVPNf— VX-v*—i?*r 2#*lT 

[0 0 6 2] H 8 VPNf-»^- 
S?*2fi, VPNf— fcr^*— i^i^ hSHVPNt 
-bf*3s# (0 7) Sr^S-t-Sd— ^35*Ufci#r 
H£gfiLT, r©*- ^i^S^KVPNf— trx& 
10 #Srfit|^Ji-5VPNf— f^^-— ^l!l*i#©2 1 * 
©*- ^tf5$g£Ui:tg\ St****"!'*) 5 tctt-*£*t 
T^SmvPNf— fcT^^Sr, VPNf— f^^M*? 1 

-y/u (07) *>6*5H-*-6vpNf— tf^*##a2 

2i. JbEfflflVPNt- fc'^^#^±IE©S.VPN 

f— tr^^d^jg^s^B^fF^ssa^^^js-rs 

VPNt-t*^{ffl^t2 3i: > ±E»WJS<0»* 
*s r-ejj _L!e©3ivPNf— er^*#«r± 

E©*3E V P N f - trxAttfcKJi ufrf v P Nf— tr 

^*ttwefft2 4i 4 ±E©K«besitfcvpNf- 

20 y fCE ZM®1rZ>%7- 

[0 0 6 3] r©#l£2 5tJ:0. yo^yilVPN 
f— t^jfffi#fi, *??vi r yCE©VPNt- if 

[0 0 6 4] §e>lciftPJ*ffiS-r?>i:, VPNf— tf* 
^*HP*»2 1I*, VPNt-^-^x>F3 

a»fevpNf— tr^^#*^3C-f-5^— ^ (vpNt- 

-eJffi^fciWVPNWJ^-li^^, ISHltSK^- 
30 ^t-^*ti2>fi*©VPNf— ir^*ft*JJ:t«ISr, V 

P Nf — tr* 2 3 caw*. 

[006 5] f— t**&f4=¥ij£#& 2 3 ©¥iJ5£*SJ^ 
r^lj -efctui, vPNt-^^#Kft2 4£rffl 

VPNf— -ffts\ 4©3££©ffi£|E 

[0 0 6 6] ^©^s VPNf-^*#J3±yfiS-, 

2 5ic»brsij«$ft^ei-5 0 $&icvpNf-tf 

**tt*US#» 2 3 ©Wfeig^t , C mm^Wt 2 5 K 
40 . £S {«»©*£* £\ ta<3*, VPNf— tr*=-s>* 
yV3l^©i!gm*f£:^-t5. 

[0 0 6 7] VPNf-W»ffi2 2(4, 

^ -^W^i^v p VPNf- tr* 

*ft=y-^/n 4©rt^tKffl-r. 

[0 0 6 8] VPNf— ^^#W^#®2 3tt, 
^■rfSJgiJ^fciOtVPNlffiaiJ^tcS^t v VPNf-tf 
^*#^JE^— © V P Nf - tf*&# 

^J<fcO ! ttKov^•C, VPNt-^^#r-y;H 4(r 
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[0 0 6 9] VPN+-l?**fHMe*ft2 4Ht, X* 
t- tf**#*lfc*L-C, VPNf-W*-^ 

[007 0] SSttnH 9 1"S is VPNt- tTXa: 

{OfLf—Zffr (@7) ^feft^-fSVPNt- 
^¥S3 1 £, ±tecD^LfcVPNf— tr^^ftcs 10 
<5^T, ±S»^--ySrVPNf— tf^*-i^+2fc 
^■L-tH^ffl-SVPNf—K'^^— ymf^Wt3 2i, 

[0071] *fcvpNt-^x-e?iyh3e ( v 

PNt~ VPNt-«i-i'i 
©3t— y^gitTV P Nt- tT 2 id J; 

5„ 20 
[0 0 7 2] ft*3, C-NMS 1 3ic(4, C- i pM 

VPNt- tr^*#OjE3S (VPNt- fcf^Ji— ^) & 
»fff*fc»©i p»H*St*«j«i-s«ltB^ s iait$n 

[oo7 3j ab\z.mffl* i &%.-$-z>t, vpNt-a 

*— ^SWf^lftS 214, C-NMS 1 3*»6#e>*l* f 
PM#$6£r5£!c:, i*OVPNt- trx^t^tt-Cli 
&&3E1-5;j— VPNt- l?*-**— i?* SizM 
LXm-tZ. 30 
[0 0 7 4] *^^3t?i'IBlPf«3 8l4, ?JXf"v 

x y >jc e &-0m v > 5 v p n t- tr* kc Kt ztftm 

[00 7 5] UU;H7, H8*3<fclflll9(::J:o"CSU)3L 

fcifc^-^tit, sot 6 izm v\ mm<Dj-<> 
hEi, E2, Es'-t, mm^-^xvwzmrt 
e„ 

[007 6] 0 l 0 f4H 6 -ec9$W->-^>'* Sr^-T 
5fc*07n-ft-h (troi) , Hi wsmw— 

h (*©2) , X-bZo 40 
[0 0 7 7] *-f rfL^sii ofc^tfHi lw^f? 

7° (S 1 1-S 1 9) is I6©#-<-<Vf (E 1 ~E 

5) ttSfJK^ttSiv 

El : S 1 1, SI 2*34TJ*S 1 3 

E 2 : S 1 4 

E 3 : S 1 5, SI e&^tFS 1 7 
E4 : S 1 8 
E 5 : S 1 9 

©*5K:*S. *ty:/s i i~s l 9\-m<ob& l 9X 
bz, 50 
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[0 0 7 8] 7f- / '7"S 1 1 : C- i pSOVPNt- 
tr^f 3#(4, C-NMS 1 30C- i pISSfeirf 

[0 0 7 9] XfyT'S 1 2 : VPNf-^x-^s 

•7<DV P Nt~ f ^.^#*l!#1-§o 
[0 0 8 0] XTyfSlZ : C- i pHfcDVPNt- 
Vx^WgiK VPNt-^*-^ VPNt- tf 
^x-i?xV h 3 tcf&ff •*-«>. 
[0 0 8 1] ?T77"S 1 4 : V P Nt~ tf ^ai— 
yh30VPNt- ?%ft¥-&3 2(4, VPN 

t-tr;*:*— ^*vpNt-^v^-i>t 2 CoSflli- 

[0 0 8 2] ^f?7*S 1 5 : VPNt- 
t2©VPNf- i?X*—yfflffi^W>2 1(4, VPNt 
-If**— mPNt- tr^*fHflS#«2 3C«fT 

[0 0 8 3] 1 6 : ±E©W3E©»**. 

r-HTj (ok) ^ r^c-Bij (ng) MJft-i-a. 

[0 0 8 4] ^777"S 1 7 : VPNf-W^-i? 
^2©CEi»¥#Jg:2 5(4, VPNt-fcT**- 

[00 8 5] ^x-y^S 1 8 : VPNf-^v^-i? 
Y 2 14, VP Nt- t^^—v'a: v h 3 irv PNt- tr 

[0 0 8 6} X^s^S 1 9 : VPNt-^^-i? 
*2(4, SlitSVPNt-^x-iJj.yFSCVP 
Nt-^^--^©3fe**ia*Pi-S. 
[0 0 8 7] Sk±nmiL (07, H8, 1219) ttJtfM 
HPS—Jry.* (HI 0, HI 1) (-4 0, 
PS© VPNt- tr^31ffl#(4, ttSd=>oiS«jfc, 7*n 
/V 1 Pi» V P Nt- e'^3Iffl#«:^f 5 - 1 ft 
<, VPNt- ^*#**Xi-5c:t*SpIffitft6. 
r.<0r.tf4, VPNt-^*^^^(«©VPNt-b' 
*3IJ8#tfS, *v I P*B^*©fUffl«tia^ 

*»SM! »TIB fc I" 5 =. t ft***"*. 

[oo88]ii2 \**mm<Dmm : *M&m-mx*b 

9, Hi 3ttBl 2©affl*W"0fl!V^VPNt--K'* 

4CDrt^Sr^-f-H-efc?>. 
[0089] **S, B 1 2 CD JUmMizEOH 6 i !5f£H 
CXbV. HI 3(4H7l^-fVPNt-t^*:« : 7 ; - 
^/H 4<DUmmX'bZ>, Wc?--?* 1 4}4H1 2©^ 
(DB) 1 Srt^^^tlSo 
[00 9 0] HI 2*54tfHl 3«r#Rgbft*Sb, 

[00 9 1] h%-ti?-t-*rXb%>. Webf^y h^?B 
t-^&ffoTV^^HIc i#\ ^-<0*^^-^»3f 
l^fAC-NMS 1 3iCj;i5^MW§ti>§2o© 
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I Pic i p l&XXfc i P 2^tU 
4¥\ PIP- i picj;!?, c iplic ip2i«PI 
T\ VPN*— bfX#f«fc;S*l/CV^ 0 
[0 0 9 2] Z.<»b%. #.x*-^:y^i4CEl*5£tf 
CE2, ^n^^i 5 -^ttPElioi:0 ! PE2tfc 
<?, &m£h'C^Z>VPmZ, CE 1HPE l*3jtt? 
PE2l:STCE2i;I5VPNo i ^fc5„ *fc, V 

(DB) 1511, P-NMS 1 2rt^t8a*^TV>SW 

10 0 9 3) rwdUlc iKif*$*Vt^5VPNc i 
K*H-£VPNf-- t?X&#i: LTI4, VPNt-^ 

*:*:«, Jft/Jvft$5 J; cn»JBttr±, HlsicSfi 
*S!)-We;h.bw- i, bw-max, bw-min£i 
Wbwif*5 (bwibandwidth). :® 
^©jfeMIc i ©*^^-^WJ^-*5J:0 4 VPNWJ : ffi 
*fc«Lc i - i d*S40VPNc i-urfeO, V 
PNc i«DWJ».S (A, Z) ffcSCE 1:J34U : CE2 
©CEaSiJ^-fi^^HCEl- i d*54t) ! CE2-- i 
dffcS. 

[0 0 9 41 fc*SVPNf— ^Sr^SM-SfcfefcttK 
iKjt^fcBWVtet, CEltPElK, PEltPE 
2ffi, PE2iCE2W®VPNP>'?t < VPNir^ 

So 

[0 0 9 5] rr-c, ffv hRJBWWCK, b 
*^#a#*>6©*-^*W«+**:»CVPNc i 
(o*Jcipl, e i p2M) ©T* 

[0096] 1. VPNc i ©VPN^-trxIfS^ 
ft, MRMMMMeVPN-fr- t^flW (flW 

[0 0 9 7] 2. VPNf—lT^*a#tt> VPNt- 
tf^3i-i? 3 :>'> (VPN a) 3©VPNU— 
&PNM&3 liCtlJ, DB 1 5^ VPNc iOVPN 
4)-- bf*&# (VPNt-^W) *B»U **■ 

bw^bw' £i**tirt-«;: 4 

[0 0 9 8] 3. VPNf- lf^«WH*, UK*-** 
m- c i fc V P N«JT- V PNc i — i d i 
VPNt-WKJ, bwMbw' KUEJW**— 
^ (o r d e r) £f— l**:*-i?*>b (VPNa) 

[0 0 9 9] 4. ^©f-t*7s-i?sybVPNa© 

PNt-t'7-7^-i>t (VPNm) ZlzmtfZo 
[0 10 0] 5. r©t-t*^^-i>tVPNm©V 

PNt- -trx*- ^M¥©2 is, astt-^ftvp 
Nf — ^*ftJNJS^« 2 3 |c# LXm-fZ. ■ 
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[0 10 1] 6. i©VPNt-lf^^fflSff2 3 
-XI 5l*J©bw-ma xftWbw-mi nfc&LT 
[0102] bw-min<bw' <bw-max 

±c*#**fii-5*etf, vpn*- 
trim (070^7^3 16). 

10 [ 0 1 0 3 ] 7 . V P Nf — 2 1 

tt, V P Nf — f^*ft*lJE#« 2 3 !&*fc3Hfe«¥lljaS 

na* roKj vpN+f-ifx&frgB&m 

^#^J^^2 3^f>g^5*lJ^e^ TNGJ -C$>5 

[0 10 4] 8. VPNt- t?X&#gS;;£#g:2 4f4, 
VPNc i tCtt-^Sftfcf— bf^*#tfc5VPNt- 
k'Xffi«©gi£©«E£, bwWbw' KSEJEi-*. 
20 [0 10 5] 9. ibKVPNf- fcTX*— SMfP*ft 
2 1(4, ±K7. TOKj -CfcSH^fc 

(4, CEl*3iffCE2l;»lT« bwfcbw* 
Mfp* C E«*m 2 5 c 4 0 sSfH" So 

[0 10 6] 10. vpn-9— fx*-^#W#S:2 1 
(4*fc±lE9. f©, CEliCE2t«t5i«t* 
4-, :x-i?*>hVPNate*H-5fc*iLXaW. 

[0 10 7] 11. KBS5B©^TWt{4, VPN 

f— tfxS^£?«bw' *»6>3B©bwfcSEH+'<<H 
JblE2. -10. ino^T, ^SbwiJfcSIWIWSr 
30 HJirC-fcfcftS. 

[0 10 8] J>t±{£4>?, £2g£43c i^-JryMRSE 
MbW4, VPNc i ©VPNf— tfX»^Sr*i3D$* 

[0109] §6 icttAMKB 1 tiSt^fA©** 
[0 1 1 0] Hi 4f4Hl id^-TV P Nf — xxfrn's 
1 5«:|Hffl (*©2) t?*>§ 0 

40 [oiii] ii4 csjvvr, #<■ (/c^-f ym) a 
fi-^fAi®, VPNt- tr^^-4?+2isJ:ot 

VPNf— tf^ai-^V h3^d?n-CV5. 
[0 112] VPN*-tr^^^-^ J r2ro±fc5^tg 

tit, v p n f — * 3*-- mmmm (bso*82 

*1M^ t UT, ^V P Nf— bfx-?^— ^-y 2 14, 
•f-S5}?y->- (Pol icy) »J», QoS (Qua 1 
ity of Service}H,«fI«lT 
50 -o-O^ &*f=ai:f4, 
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• ^Mt«t**L*:v^«Mi*t*©*^^^*»e»*»t [0 12 31 m^&i s&&m-tz>„ *aa, si 4© 

§o [0124] r©Hl5t*SV»m VPNt-W* 

[0 113] *fc*©VPNf— l**-*-*-^* 2 fc« -3?*vhSOf fc, VPN-Sh-tr*:*— ^JSfiattB 

it-tSynyM^ffltS^xA (P-NMS) 12 (B9 0f»3 2#i) V PNf- lf;*ft#**«i& 

tt, gWfSffc* (a) , flt& (b) , ftffi (c) (H9©#fi:3 i#fR) 2S^£*vCV^o 

xm& (d) tfc*t«. VPNf I0 12 5l*@©41i:*te(±, VPNtf— tf*ft 

*2tt, rtv6>©*a»a~dU:J:5fl ( 10 JW*^i»--C*>S. r©/ = ^"e(t, VPNf— 

S^-^tS^V^T, Pli/XrA (P-NMS) 121*3 tr*-e*— 2 2>»e>t|jF£*l,fc, v*-'?* 2 £ 9« 

©OSHiK, NE (Nstwork Elemen «W»WMW— ^*©!J X UE»LT, #**^»!>> 

t) a«M*»2 63!cfeO'te»Si"5#-l* (Po r fe*«t*»8*- tf**#*l/C-r*-f+2fc**- 
t) St^LT, ET©:/n^#TH4rt©PE, CE, 

PCR«©« (NE) |rS»t5. [0126] SfcCgHu #**T«fc#VvC**#"T 

[0 114] JiiaK^ffSSPatt, 7 p n^^4rtt acj^CEfctottS y * ©^Mfli^&P^Sfc* 

»£Ufc#«©****fciBSLT^S. ©CEF7t-^^-m r©h7fcy*tra.- 

[0 115] ±ia«iia«3a»btt, 7asu?M4-*i£ g*&mirzzt££ix, nMnxt-rmaxmrnvm 

©J:5 4«» (NE) (cior»^SH-C^5^Sr#iZ #«:, 9WE©ttJfl**©:RafcisiS C t#"C* 5. 
ffi»l/r^S. 20 [0 1 27] *fcf tt s *X?vOVPN^»l:h 

[0 116] ±Ett«if3»» c tt, ±B#S8BC:i8tt* #ni*-i LT»ffltfa#fcA*a*:»© 

T ^ 6 . K«ffl-tsfc»©vpN(wieata--cas>5. 

[0 11 7] *fc±fE«ifaiH5dtt:, -^P-K^B [0 12 8] (*2©tttt) Rfc, *^KiC#SVPN 

[oiis] ii4©ai fcKtt ©^iHfticovN-ciftWi-*. 

fcfcAVPN*— C^ai-i?*Vh3©±fc5«tgtL [0 12 9] IHl ett*»WK«**2©»« 

t, *^^x ? y (CE) h?hy*HMtfe VP Srffc) MM!i-Sfc»©VPNf— ^fi^fAl 

Nf- lf^ n n B KM#$iJ«^ll#5 J: # x^V P NP«^ tr^-rH-e^So 

ettWIB«»»*ft-Cj85s OS*t»iK, »ii©#-b 30 [0 1 3 0] &fc*L*gl©*¥f±tti£©l2 5 tiHCt?fe 

(Port) Sr^LT, ^x^syi'CEOgS^f 5. ***©», *x^-7fHry!C-8rti;, 

5o -rfflfity^- (c-nms) l 3#?Ba*&ftfcCLi: 

10 1 1 9] Ell 4fc*fVPNf— tf^W^TA -CfcSo C-NMS13tP-NMS12t© 

1 {C*5ft8«ia«^T© (1) . (2) SSAtf (3) aWtJ:o-C±ia©*±i»Mk!i*3t*Stv5r4;fc*i- 
*HI**vS. ft* (1) , (2) to At/ (3) I4S14 

©>pR:t>;5*3*L-ar>5. [0131] »2©««t©#'fyhB*©J:5ft*rtt 

[0 12 0] (1) fe5„ i-ftfc>*>. ^^isma^*?^ (C-NMS 

2, 3*Jit54taC-C, a**^#vA-C*>«iMR© 13) #***"»«5©WH*R*ML*©WWt* 

^»**©4SII©^«*©flaUll!:*L-C-*K«»* USCX, VPNt-^x^xyhSt, VPNf 
#fcovvC©S** s fJfeft«*5**«\ S^VPNf 40 - W?^-^ 2&"i^D^ »iWTA 
-^x-i?*yh3ltVPN*- tf*v*-i>+2fc (P-NMS) 1 2i, ©«*e.fc»K VPN?— tf* 

5, o*f}^«IS (bw) ©-fl*tt****#»*. iv>3fllJ«-C**. 

[0 12 1] (2) *©»*%S^fcVPNf—^^ (0 13 2) SbteJMWSfctt. VPN*-tf«-5> 

21*, ST©^P^^Ifl^A (P- *v h 3tt, VPNf-^*#Sr«X-f**fc#l«i- 

NMS) 12S»U rvPNf— W»W)ttW ^*«X^Wfc*©R*Lri>H*+5/<*M--* 

t . §<> f-^fclTU *^^^i»^^13!i, ±IE 

[0 12 2] (3) *©B*ft3Utfc^B/V«MW ©WW»C*o-Cs VPNf— ^*tttr«3S1-'*t 

^fA12ft, ET©^nxOf^*4rt©««» (N T?*>*t*U«tfci:*, ±e©'<?*-#7--:/*S:* 
E) SCttU rvPNf— ^^©^HSr-T^tS© 50 BBU-CSOfeStbfcaWVPN-S— t?^*fr*» VPNf 
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[0133] mn&mi etaH-vPNf— tfxVS 
wta i ©JWWW ^fc^H-C&S, 

10 13 4] *BO**ttlWat©EB 1 4 i n CffcSo 
**S«5f±, ±3Z& ;* r— 3 

v^sct-c**. »fm*»lL-cH*«> (i) , 
(2) , o) (4) x-manzo 

[0135] (1) C-NMS 1 3fi*"f*^^^P5 
© h 7 fc s> 9 if- ^n n »f»f-^ ^iR^-fSo 

[0136] (2) C-NMS13Btt*, ^5^-^ 

5 V P Nf— ^^#Sr^-f5. 
[0 13 7] (3) ±B (1) fcfc^TllXjfiLfcifHT* 

tt*U *©f?-#**«*«*.fciiSr*ai-*i» 
WW*0»fttVPN*-lf^*JE*l3e»3 Bfc»B 
fs. rjittt- tr*3i— y©3§fr8tig «a9©#S:3 
2) 

[0138] (4) ±EVPNf— tr**JFWJ£»36 

±E«*ifi*.«:*/<-L#3VPNf---ir*fl 

fifttCs VPNt- lfx-e^—i 'S-Y 2 
[0 1 3 9 J a»< UTVPNf— tf*-<?*-i>+2l±, 
^©RjfcfcJl/S-S ±51^ ^■a-'V/SS4rt»» (N 
E) ©f&OT&frS. 

[0 14 0] £l±«r**ttKSIft-tSi, B 

•fS^frSr, C-NMS 1 3i«ffit5, VPNf— ^ 
w-^yl- 3 « % £ftfc©&#a*&5«fil£i&*.fc 
MW-o, *o«tt«»J^Ji^**v^i, VPNf-f 

[0 14 1] C-NMS 1 3/55, #X*-r$l5©}Iffl#: 

i-i? s yh3 fS s /<? *~-?7—-7>\s 3 4 £#fig Lfc 
ttv *©#!HLfc*X*fr«\ VPNf— MXi*—*? 
t2fcP-NMS 1 2itcJ:9, ^D/V^4ICSR 
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i-5^iricJ:«?, **#^lH6©Sffl#*teflSC;fcvp 

[0 1 4 23 Hi att^^-^-^/J^tHtftt 

[0 14 3] *!M©±|g©x-:/A-©rt2gl4> ftf5*Ufc 
H7©±S:fc5jrfy-^l 4©rt3£i|i9ircfc3, * 
10 g|©±lfe©7 1 — ^3 4<OrtS^*TL, VPNf-tfx 
M9J&S3 5 ft, *HOT«K-r«t* , f i5**JE 
©ffi££*f5. *©¥«£© t-^Wi, WLWL<7)i"<ji>frt 3 

[0144] 1 ft. *WfcaS B est Effo 

r tmnmttb&lnk-rib* *ofti>6 2 0*up 

[0 14 5] U^2fi, §^^±12 2 0%u p©« 

[0146] \"<)V 3 !*, SKfctttfiE 50%up©I 
20 «i1-«i. toi oo%upteSBX-f-6. o*9w< 

[0 14 7] *fc±i6Lfc*2(Ol8««)t>i-C©iM^S' 

nn-f-s. 

[0 14 8] 01 9ltHl 6^"*-* 2 

© — 31 © -jr s x & js-f- n -e h s o 

[0 14 9] VPNf— trxOSttSrSJtTV 

C©^Sf±s TE© 

30 fwrgftftttrtaft*. 

[0150] (1) #X^-r{II© C-NMS 1 3^$ft 
mZ.&mWrtZ>t* VPNf— ^^-i?i>-h3fih 

(l) ) . 

[0 15 1] VPNf— tr**JE«jett3 5tt* C-N 

£TF©ife>3 
[0 15 2] 
40 [«U 



[0 153] (2) VPNt-fW-^xyF3li, PNf— tr^^#©ftJit"<^^S^i-5o 
^7^-^ r-:/^ 3 4 &#JTf 3 (B*«> (2) ) . [0154] (3) «fc*VPNf— 

tUT^^-iS'fttjiKSMtrof— ^itttftU V 50 *l5i* VPNf— Ma-J>*i'>8BlftVPNf 
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-5?+2fc®fc-r<& (lit 1 © (3) ) . 

[0 15 5] (4) ±ES*©a*B3:SftfcVPNf— 
tf*-7#-i^2f£ v m#©fg#**^©ffiffl*if$&^ 
*8t9, t«3*3EOR*©T>r5t*IISfi-6 flUf© 

(4) ) . 

[0156] gOPFsrefcn«, vpn*- 

10 15 71 (5) a*fcSEJEK*# r-pjj -ryfcjwf, * 
©t-tf***** ttBSRSaEHa^VKiUr, P- 
NMS 1 2lcii*0-f5 (mf© (5) ) . 

[0158] (6) P-NMS12tt,^^f- 

frta. £ ft ic X o Xik^#JtD V PNf- fc"x rt^rj*^ 

i»WK:33is*ia (8a fro (6) ) . 

[0 15 9] (7) NEOK&SXlCJfta'f&fc* p- 
NMS 1 2 ti-e©^«rS*Pi-S ®f© (7) ) o 

[0160] (8) &,±\zz.z>mizft-v—vx^om& 
te*ab+si, p-nms i 2«*©li©ig;££vPN 

D— 2 K»L"Cff 5 (Bf© (8) ) . 

[0161] (9) VPN*- 2tt, 

**-5>s:Vb3K:a*n-*"$ (BSf© (9) > . 

[0162] (10) VPNt-tf^x-»?xVh3ll 

*~?T-7A'3 4 Sr^-rSx-^^-^) (- 
Sf— tf*©'-*7^— *£!S&-?-S (Hf <o (l 
o) ) . 

[0 1 6 3] £Lk©.fc5^ feSSUISf ©VPNf— tf 
9* *?h!7-^Oflh 
©atJfcfli i SiiftlcfTx. -5 :tC45. 

[0 16 4] WSOttKI *38WK«6VPN 
t-lf^ffS^^AKlfctta, VPNt- fc'^SI© 

[0 16 5] [M2 0f*#3§«{C#3^3©S§1£ <¥g*b 
ft) *RW"f«fc*»VPN*- ^Wl^yAlt 

[0166] fc«U*B©*»W*mftoEB letiCt 
^rrv h«i*4 issj:tf4 2ftt6»U"C3iffl*3a* (4 

0) *MW. 

[01671^3 ©«©#-f > HS&©<fc 5 fc*#fc 

s>6o i-ftbfe, *^^^» i ta^-7 1 ^ (c-nm 
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S) 1 3##^^IB5 ©WB^trSfcU*©*** 
SK:£ot> VPNt- tr^ftfrSrSBJEf^t^feSi: 
$J»rLfci:tK ^©N*W&#*:^$?5©ai;8ffS#4 
Olc9ftrt«Xn4MttK9Wai¥S4 3J;iffiVPNf 

-if^ac-i?svb3icaaii-s i©vpNt-^i- 

#, VPNt— fcf*-*-*-S?* 2*J«fcO t ^n/W^1f 
Si^^rA (P-NMS) 1 2 £©&&£,}:*), VPN 

10 5. 

[0 16 8] S^i-A^ttt, VPNf-to-^ 
^y}-3ii, VPNf--tf*^*SHM-3IRfc#HIW- 

.x^rA (C-NMS) 13«s, ±12©^m^*f-J:o 
20 [0 1 6 9] 4ib\ *H3CDS|«(ig<5< VPNf- If 

^flW7A 1 ©JWfcflW *-^£*-fEltf\ M$© 

©*#»<* ^ - i?*ww* t &© fc 19 5„ 
[0 17 0] VPNt- br^-s^v h3Hu gfceSL 

*£3E&#i£, VPN^7^-?7-7*;l'3 4 (El 
8#JS) i:*^ 7JX*-v$i5©iiffl*3*4 0^a*n 

[0 17 1] C-NMS 1 3^, 7JX^v^5©51ffl^ 

30 wommm^it^tmmvtim, vpnt-^ 

ac-i ^y!-3f±, ^7^-^f t -^34Sr#figtfc 

iifflfs#4 otc-tro^n^ii^-rs, *i/t\ a 
m^M^ 40 commas VPNt— ^^-j?t2i 

P-NMS 1 2 id it), 7"o/M^4^SS*$-y: 
S„ IftCJ:!), j&^^^5©affl«^KfSCfcVP 
Nt-tf**#«\ affllfS#4 0»W»f©7c^ :/» 
✓<^IB4©*^-*©;frffiftUc:, gUJSfc, 

[0172] H2 1 iiH 2 0 KSH-fg 3 <dW&<d tr- 
io ©— aw^—yv^Sr^-tEUfcS, 

[0 17 3] *H»i»aofBl 9©S^-^V^Hfc5E» 

( ) trttl/t*-*-. 

[0 17 4] ^EC, VPNt- tf^©Stt*S:ffcv> 
fc'^>©i:•t•5i^ TIB©7°n-fe-^ (l) , (2) . 

x<om\z.mm-*. **** (n). (12) 

3©ffiitIt©/Pt^-?*5. 
[0 175] (1) B190(1) iCPto 
50 [0176] (2) mi 9© (2) 



( 
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[0177] (1 1) VPNf- W*-i?xyh3C 

3»8*3*4 0fca*n3;fta (at© (11)). 
[0178] (l 2) 31ffltfa#40fl, c©Srfcfcf 

<P© (12)). 

[0 17 9] (3) ±!E«3ER*fco^t:«>iRIWr»*S: 
il&^tlfcVPNf- f^x-^xVh 3(1, ^-©^Ift 
SrHrfcfcVPNf- fcr*g?JES£3fct L-T, gSdWS-VP 

[0 180] (4) ~ (9) (1, 121 9© (4) ~ 
(9) fcHC 

[0 18 1] (13) £(±(C<fc>) VPNf-fcr**#© 
S^fSE £*!,£©-?, IWC-NMS 1 3\cmk£ 

*9, **W***«rC-NMS l SWWCtftV^O 

-e, -©^n-tr* (13) a*iHFe*>5. 

[0 18 2] a±©i5C, fc£»Bl'F©VPNf-lf 

©«■«:#, ^a»T», fT*.6::ifc*3. 
[0 18 3] »±J*'*fcJ:5te, ^SUKtVPNf- tf 
*T?(1, ^ftt^^'^-^T-^^fl, ® 

^?;><-*y-^3 4©f-fc*;*;£#&#!f U VP 
Nf— tf*2fX«feSJ53 5 (HI i£<fcoT, if 

© «fc 5 *t— f * ^JlfRi-^t d»£ g tbft fc'WHr 1" 5 , 
cot* *©JfWffc, fttiSSii^¥®:4 3icA^-f«>o 3 
SJ6ff3#4 0 Of^u—;?) (1, f 

- vxmmifei® 3 5 k i s^wttjit^ftimtcffttB 

2(c*j-UT, f- fcr^rt*©«3E«rR*i-«. 

[0 18 4] #>< L,x*x?-vm5<ommim\£foKiz 
vPNf— :/n^*'iH4©ii»*a#© 

[0185] ($4 ©IMS) »tC, V P N 

f— trjatfas^yAifciattS, t^7-fry 
[oi8 6] m2 2\±*&wimz>m4<DWi% «— /< 

/^7^7yM) fcttHf 5fc»©VPNf- tr^f 

[0 18 7] fe£Ufc0©:^r*lJfi*©El2O kffiCX' 
hh» Hft5©&, 3^«t»«3EiB*i*H;4 3*, f- 

[0 18 8] JM©a»©#^^tt*©±5fc*J*fc 
-rt£t>h, VPNf— tf^3i-^i^.h3t*^. 

(P-NMS) 13ttfS, fwV 
#7^7V HB*T?**i-3t*, Sg^y-fT^h© 

as© i o t ur , »ffl«F«# 4 o fcwuM-sjgw^ 9 * 



12) #12003-1 24 9 86 

22 

3tSRI^7'I'T^h*3l54 2t&, f— T 

WtA 3$rH^-tS, fcv*5«Mrc*>*. 
[0 18 9] SfcK**b<lt, VPNf— tf*x-^ 

[0190] H 2 3 itm 2 2C*tVPNt-f^fl 

10 [0 1 9 1] #^©*¥flftl3£©&] 1 7 tPC-CfcS. 
Hft£©il, J:JtUfc31ffl««S6Xa*i#«4 3^ V 
PNf-tf^&HiifclSlU 4 t bT^fvO^CiT? 
hZ. mfti*t>+ (1) , (2) , (3) jaj; 

0 s (4) ©5*>, (3) 39***6. «f4©«Hlh? 
«, r.© (3) icsst^-t, VPNf-e^^5a^igB4 
4 # VPNf"- ^x/^-*l£H©iI*o£C-NMS 
1 3«*»feStttk«. 

[0 19 2] H2 2:fcJ:tfBI2 3©flMifc»»-r$i s 
«ffl*»«3Ea*l#»4 3«: s C-NMS13^VPN 

20 f-wi-y>> h 8 iWW-tt^w-i ^3^4S* 
(41, 42) ±-.©iHS**#atLt:» sia-tsc 
t^-ess. *^?-rMira-fei'i"-8 6t^©#3fte* 

3tW^?^r^h«l*4 2iUr, VPNf 

[0193] smiftE©«^« (4i, 

4 2) t, VPNf-t"^^"^^^h3t(l, fw< 
feitJf^9'fr>'h©M#l-*0, ftZCttrtLANS 
fctt^fy-^yK (in-band) teTftttSttS. 
[0194] H 2 4 (ID 2 2 {^-r»4 ©J6tK©t> 1 "C 
30 ©— S©->"^>'^Sr^i"l2'Cfe5o 

[0 1 9 5] #13(1122 l©v— tr^xMkminZX- 

watwT'B-tr^nttra-©*** ( ) 

WfcRfcSOtt, HB2 4©±«!fcS3V^-C, VPN 
t-t7x-i>xy h 3 tlSflf 4 0 «* (4 

1, 42) htK y—></9 y^rvYk LX^^tiT 
^5CtT?*>S. 

[0 19 6] UfcdSo-C, ffl©7"nt^ (1) ~ (1 
3) tt, 02 l©7'o-fe^ (1) ~ (1 3) kmZX-h 

40 SSttttfll&ttJl&S. 

[0 19 7] C©VPNf-fXl, ^7^^-rS35©a 

5. 3SPS^7-CTVh4 2(l, 
•r«5©f--lf^-^=^h 3 t«^L-tfc!J, 
^^4©Sffl^ffi#©*iJif{cioT, SSE^y^-^ 
7 l -y/V3 4±©f-fcr^*#^gi-S ( , -?r©S*fc 
S<5#, f-^ai-^y h 3{IW^7*n/M^4 
©VPNf-tf*^*-J^2}OttL-C, f-t'^rtS 
50 3SPS^7-1 , r>h4 2fl, *^i?^5© 
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tf*^-v>=V h 3 I*, *ffl**fctt^ v-^y K 
(in-band) CtWtftftW5fc», **>J 

[0 19 8) *fc, ±1E»aHI*^K:J:o-r, jiffi^S 
#4O«H^tfc4i0f7t*ft-ea*<. mtiitmmx^v 
PN©^m&?r5 SLh©«fc5fc, 
fg^roVPNf— i?xmk&tiS*;£*tZ>Z- iicfcfj. * 
y M7-^oWl^©«JS*«, atHMMlnr, ffiarfc 

{Cft$ 0 

[0199] ORE ©««] Rfc, #3SW£«S V P N 
t-if^^lv'^fA 1 lc*Mt5, aUfFHT/S^Mrof 5 

WCOVvCfWWS. 

i o 2 o o ] m 2 5 tt^mwimzm 5 Gmff 
a 1 ^-ruT'fcSo 

[0 2 0 1] fc£Ufcl2©*¥ttffir3z£<z>® 1 6 iRCT- 

JlftSOfi, -WibX, RAN (Radio 
Area Network) 5lt^«*52i 

[ 0 2 0 2 ] JR 5 ©tt«©*W f hi^c^J: 5 ft#J$fc 
*>«. *>x#^m*mi'X?±. (C-NM 

S) 1 3**^^^«BOilffi«tiSi*fi£ai-*«>E»Bf 
SlySCt, l»«ltVPNt- 2 fc* 

ft*»*aW*tti*JEliH**6 3*rVPNf— tf^-r 

[0 2 0 3] £ k(Cflr{«ftlc«\ ±E©affl«**H* 
§&#{&5 3f±, H&SBVPNf— lT;*»r*-S?-\r2i, il 
E^B^^K*»-C««**b5*^'f^«*5 2 

[0204] W3iUfcJ;5C, VPNf— tr 

-^y-^/u3 4«r#*UX»S*iifc*35VPN-9— 
VPNf— tf*^*-^+ 213^1" 
[0 2 0 5] I22 6ISH12 5 fc^-f jfc 5 *> t "C 

[0 2 0 6] #11(40 2 1 W>— -7-^iata<flL.-C*3 
9, H^cD^n-fe^lwttlRl— OS-f-* ( ) Srtf-L-C* 
f, #lwSft5©tt. 02 eoiUK^V^, fVA- 

s*4 2 tmmmyiim^wcs 3#**>sivo^ 

ZtX-hZ* yo-fe^tio^'CJ.St, S2 1© 
il&T'p-fe* (11) IS2 6tr*JV>Ts VPNf— 
tf;w*-i?+2C#W&a*|i:/n-fe* (2 1) 4: ft 



13) <&ffl 2003-124986 

24 

9, »BiF»jf (fUM&%5 2) K> 7°t2-fer* (2 
1) *^LT©^S*®ttB«ri-5:/»-fe* (2 2) 

«*5 2^ibv*-^2fcigtV°P-teX (2 3) 

[0 2 0 7] 11 2 5&.fctfia2 6<0®f&%g®1r5k, 

VPNf— y^fcfev^T, affl«ttsewiaB#a5 3i: 

Lr, ^y*--*5'h^-M*itB (5 2) i'i 
9. * -vJ8 5 ©jlffiffa-fe V;?- 8 £tfl.©*@T#>$>- 
10 fc, VPNf— tf*&#©t£S£^*5.k5teL£.*>cD 

^^5^5 2A5fci), jSR5*miJ:9^@®Jt?VPNf- 

[0 2 0 8] *^y«5 2 (TJ^-^ilfflfS^) 

**?^mmm% (52) ^©»»©*ifeH: 

&©i: 5. 
[ 0 2 0 9 ] HI 2 7 ttSffl S#^©a»#ftfcH»8 

20 9 , b 2 8 «sffi^si# i <omx<vmw 

m^^xmrnm^-rmxhi). 

[0210102 7JCj:il«, J *«»B*a#4 0<7>$ 

10211] mz-mfm<o*-*T kv* wsid 

*fc»4j*#WB©** (Mob i 1 e) SrA^-fS, 
[0212] 028 &#8H-5 i \ *^V/W»jfs 5 2 Id 

[0 2 131 JdE»*IW«fcl/C, VPNf— U^* 
ft<om®fa®%WLfel,X&<&m&tbV-. *<Dft!®0- 
30 #J£Ii 2 8 (C^fo 

[0214] *-^fA«* 4 2 -CWWSrff 5 ICS 0 , * 
/</f «*4 2 WftfS:i/V7'A'l:tifc*> -fc!E© 

2 ©M*#»5S*t>«*fcfri6 i 5 

[0 2 1 5] KUifflfl#4 0ll, j*-/KTKW 
^*fcl4^/M/v^*©#-f-coSftlcJ:oT, 
y^^VPNf— f^^Sr3eHWffii:ft9, 
40 PSO^a^S^StOttrt, *^*v©VPNf- 

[O2i6]oso, %x?^m<Dmmm%4o\zffl 

ta-fev : ?-8icvNft<Tt, VPNf— tr^«WSr*i 
^^^■s^v ©VPNf— t*^^#(0is:^-5igi-efe 
5. 

[0 2 17] {^6<7?«|^) #JBW£«6VPN 
f— tT^<f I'>7fA 1 IdfcCtS, S?-V— -xi^x 

[0 2 18] H2 9tt*6©«««UliUfcH17«>* 
50 ^«r*i-0t?fe5. 
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[0219] Ltz^X^m<D^itm 1 7 <DM$.t P 

61i, yn/^^ffi©^ y-^y K^g;6 2 

[0 2 2 0] »6cD^1tOJK-r>h{i:^©J;5**^t 
£>5,, -fftt^ VPNt-»-7^-v i -y2iVPN 

(0 2 2 1] JH#fi&fctt» *<0>f V-/<V K#* 6 1 *3 

?x-yi?pEti^ ztiteti, m^(D6 iaoj;tf6 2t 

[0 2 2 2] i©A5K-ry-/<vKft*Wi-t-6ri*» 
6, 01 7KKI« (4) ©gf[f£ ( rVPNt-^f 

6 3 IzxnfrtlZo 
[0 2 2 3] SEft-f 6 ifttf, V P N't 

3iVpNf-lf^-^ 2 t 
©Ppgoilft^l&iLT, 7°n/W^i*^^vi:<D|S]-e 

t?, ffit^ii^iift^^A-r 5 - b VP 

[0 2 2 4] ftfc. ±Kf mo^XfSLmi- 

[0 2 2 5] @ 3 0 li*«W(C«5'/ ^-/O Kf SK 

[0 2 2 6] MI:J3V^, A^^viyJ/CEfctt, 
E«ffl#->-C©flMRt, VPN-fV-^PKgSii-r 
5fc»©tbB* M^-/<yK*«e 1) £*x.5„ 

[0227] vmm. 7*Q/vyi y -;pEiyi en 

[0 2 2 8] Croyn^-f ^y^^|?«tt*a^«:^ 
m-r^fc&tf*. &©2o©t&Sl (i) fcJ:t>' (ii) 
* s ■7v,<4?x-vV?E±.<Dffim'7—? (c on f i 
juration data) b VX y *8&l!:R*-f 
5. 

[0 2 2 9] (i) m&-f '» /V^i y i>P E 
SVPNf-^x-^yhSOI P7KW. 

[0230] (ii) ^^ir^n/W^tOWTfa* 
i"-<#VPN(DltSlJ^ (VPN— i d) . 

[0 2 3 1] ±ffi#**-«5'3>CEfci*fctt 

xyF3i oaa**»«:a»*.*»tiitf * 6>ftv\ - ©$ 
mumzo^XZV 2 JfeftBfcS*"*-. 
[023 2] 113 l}-tCEt^—i?x>V 3 b<Offl<0% 
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Vh3 i©Mo*2©S«*ife4r*i-H-e*>6. 
[0 2 3 3] H3 ltt, *s» bP-^tr^S-ftettgC 

(port) ji^ai-^sVhacSajIrt-aJMSSr* 

[02 34] H32tt, (*^i?v^5) 

sr^-LTs cEb^-v^ishszmmi-zxmz* 
-r. 

10 [0 2 3 5] 0 3 3^*-: ^2i^xy h 3 i: 
©H©^ v-/<v KiC iSSMflJ^-f HTfoSo 
[0 2 3 6] *Hfcffiot:tt«+*. 
[0 2 3 7] (1) UtifE© (ii) t4fc*>VPN-i d 

HNR#9ti£r&. ^©^, (2) swe©2o©«»*ss 

(H3 1, @32) ©^-fttjWtioT, 

A*) «~«»1JMB;9*ffl-CffS. (3) HtlH 
© (i) l P7KU7C£^ gift© I P7K 

kWVPNt- tf^oi— ^cnV f-A (3-A) *T?. 
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[M**2] MIENS' M7-^f— tr^*3KIS«t±, «• 
ttTU 

fcfcftv\ si«*a«*«s-*-a 20 
siamss> *s*tf, *»^?-»*»6ot- ****r: 30 

*fcM*m\ ?-^7B-f-^fcHILt, *© 



#H 2001-282760 
2 

^©^aojifr^^rt^v'^v'^i-fess^ -e©te 

-f— £ «B« S*U * * * fe**«-*fcf — 
^©K^^fVtCji^-Cfflf^S^ 

afstiti^ *^^-^^?>©^-tr^^— 

of, 

^ y h J7 - ^ ffffiBEllIW -eS*p p B «^«fc-f tf ^ * 



3 

*£tf d i S:««t "ti^A^- K> W 

yp^asy ^1©^7 y?frbmi&&i%Z>Zb 10 
[Iftftgl 0] a— r-^SriR^i-SUfco*^^^ 

[3&81©f£*fflfcifci?l] 

[0 0 0 1] 20 

[fsw©mi-38«#»] jwswh:, »*ft^B/<^^ 

{fciEl!©a{i tr* «:ftflti-« MHMBBMW— f 
[0 0 0 2] 

[fl&fEOSff] 4>9-*9 h©3SHi::#v\ 
flW- (*s> • f— • 

y<4 ¥) tio raff-*- vrnm ZhXZX^Z, 

gt£%7asU ?\££-oX-®&m%i£ 30 

[ 0 0 0 3 ] Cffli 5 *a*roaflnH*r«BWi-***C 
OV^T, titli, #H¥0 8- 2 7 48 7 4 -§-<&$© 

rmazwMasmtxwmi 1-5014 

-■/©if— ?xMtt*ttXlMftr£afll Pf*J 
[0004] #§9¥0 8-2 74 8 7 4-^f::lH4£&tvC 40 

8HKU I©Ifl^)t«^tf- tf*©S«£fr?f 

j/f— (MAP) £ELTV5. CCMAPKiotI 
aU-f aV*SrfrV\ »— 9 1 — f»l(«#©^^^-7 

[0 0 0 5] *fc N #^¥1 l-5 01 49 5*aMME 
*©38WT*tt, ®gC©f— ^'^n^/f^t^fX SO 
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(SCP) RUES, ilfSy V*K*oTft£*«H& 
[0006] r©«« !J V*tt:, AHMMfc/A^^rtTT 

(quary) £»9tt»*ff S^afctfL-O^. 
[0 0 0 7] 

[*Mi4«*«tLJ:5i:-raiiaB] La>U ME©'**:* 
i&ISl^O 8-274874 ^^RCfBftWKflf"? 

LT &SC£#IE LfcaMMh- tr * & *ttTJ* ftV^ fc 
[0 0 0 8] *fc, M¥l 1-50 1 49 5^^15 

-HMMfe*ftv\ 

10 0 0 9] iax:r, ttSKadSHfcs^caflr^f h 
feic, aff^srt^scpicfcv^-c, cpu^©yy<- 

[0 0 1 01 i©J:5l-, t*O^S'hS7-^K*5V N 'C 
■y f 7-^^-4 D ° B K*^i-5 r. i ^+^Eit bfc 

[0011] - © J: 0 ftH6*!Sflf ©RHBjftlSr 

afli-^— if ^ -i*awiu #>bfci:u 

n/M ^©aft-5IIM4M*3«ttJ«7 , 'i3/^ ^PiC^fc 



[0 0 12] 

•5fc£©#i£3 &%ffl<o-?>vi- V* ■< v 

U, A^^^jJ^of---if^*--y j ? > K*Wf«wS#^ 
trff 5*5' hv—?f-~ ¥x<gmm&k , 1MB* y b * 

[00131 ma* y m?-**- ***a» 

Si*:*U WE 1 ****— lf^^B-*-K»V % "C 

u, atts*fi*t«Js-*-a w-f^y 
f s. 

[0 0 14] 

(domain: £ •JflM.iSft*^*'*' 

t^«««C*>fc9 , 

k . ♦ xxfivaimx? smarm 
[ooisl^ut, &v*Jy\£mit>tiiz*"s 

[0 0 16] EHTK*»W®5ltll0»*«>**K<»'^H 

Z0>£?ic> -v;v^Kj*-f h »© 
yn/W^<Dilffl«S»&S*U, S^fc58l«HlR:K* 

[0 0 17] BiKfiflftfetfSJ:^^ #**"«*Efc 
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JBD^- MMW 5 - 1 
if, *^^lE^y-^>y^-?4, #**vlH 
D -f *~f 3 >* v b ^ 5 t fc ^ 

[0019] ^^•vasn^-f-ssff.&jtfcy-** 5 ' 
10 4*=>e>7 f ^7 i -Y *—■ 'sa s*-e 

•f. #ot, yn/^^Atyn/M^BtroralfcaS 
KfflM©*tt*£**WU 

20 ±&8im, ** n7-^f— tr^tfaw^tf^e 

[00 20] (1) t^hP-i't-^fStfi 
WfcilJStfJIiJHrt©*?' ©**»**« U 

[00 2 1] H2tt, ^yh!7-^t-»fiii© 

S2l, r*i,b7^*^fcflMtflMW«KB»r5 
IEttiSS2 2, Kc9?J*MEi£ (7#!7- 

40 K) MftSt57-^7P-t^2 4, K 

B-^-tcgfis&ffVV 7-^7B-t- ^tJg^U, 

-A2 7, *y h!7-^WBW2 8tfOrt»««*-- 

[0 0 2 2] ^7h7-^t-^fliE2I^ 
©«li»2 2t»«/o-*-2 3» 7-?7n-f 

50 w<-2 4fe«tt>*^artas^s*" A "» (7 «fc 0, ' N 



( 5 ) 
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7 



[00 2 3] ttUBMt 



fc#**vSD*Ti«ffi£©af&7*-*£ 1 0Mb p s 

* r-&£E-t 5 , £ v * 5 r. c: -ev * 5 # 9 -y-©-#J 



5fc©T?*>5#, #attscosmstis(te>tLfcjy.T© flr^-^tri oMb p s s-e#SE, fc^s^*****- 

21, K^-<vHWtE««2 2 2, *yM7-^«MHE [0 0 2 8] Hflfr/p-*- 

tiffls 2 2 3 , y y-*i5H:S& 2 2 4, ?K V i/HB*» 2 *K«*/n-* -©fcrtfcovrtiwj-*-*. Wt&v 

25, -9— tf*|B*»2 2 6i«r«*.-r^S. 10 2 3 te7"n *r?A«WfcJfc tHWW-* 

[0024] ir* \"<)i"&m?M& 2 2 i W^^'f^'y^y-^h'Os ^^9 t Aii«¥S2 

itt, #*BH:ffc**-S;8S» '?uX49hfr-fxi'U9 , & 3 3, ir=¥»y7 1 ^ , i : 3l#g;2 3 4, lf*W</V& 

taflif— ^tcs8L-r-g-s©±, ^ufcti*®*SB« attars 2 3 .1 , w-fv^- n : a^2 3 2, 

?B<nm±<Dmm^m&*m£-tz>m<M'&®.-. *s [0029] r^t, ^->^7 i Aa*^2 3 3f±, 

*#-f7\ f-?h77^3'^fflyn7r^mii, P2, vA^K>-<V*-tr^n-*-lt» 

SFfraSWNIWfcStf. 47c, f-?h77^^©> gfcSiv r©«^*7^fc®lf1-£&&©--fy*7ai 

y 7 << ;M»$ i ffiF^fim i ait p b 0 «*^, «*.« ~* *s§t*i-<&. t^yf^ 2 3 4 it, ** 

mttf-fiiDh^yj ytft, 1 OMb p s£(T©4§£ 20 ^fAiClflEMLT, rt^*^©**:* y 7 1 

\-mm%<nmm&mmmu 1 oMbps«±0» *»t'*yAfc©raw*fc, * 

fitjUix-* ***** t ^ 5 «fc 5 ftflma«IE3«*ftT *^yA*»fc»tE«f««:afSU BBft$itt£l*W& 

[0 0 2 5] Y'*J>mf$$dffiM2 2 2&* #**"WC [00 3 0] tf— If * U^tflfg 2 3 1 fit, 7 s 

M©#/£ftlST-;kS 9 fcfc*if, Hl©«-eHu t5. Affl^S2 lfc&LTf— 

M7-**"T»tts 7'a/V/AilM« : a^i^ni^'l'^ WW'S. 

Bilffl'ffafflSSfSLTV^^, r©®3\ ^B^^ 30 [003 1] h7-f^- hflfg2 3 211 

^IWtfoMft^n/Cf UT, K*-rvlfMJB« ttHHRSr -f 2 2 2C3«S^5i*te, 

SE2 2 2i4S-5«bt:v>§ 0 fats. fW*y*-7-A<fg#4g:2 3 5fct, f^o- 

[0 0 2 6] b!7-*fl*fi&iE«S&2 2 3tt, 7*a^ *-2 3 t !7-^ 7P-f- '<2 4*aflTtSfc«)©-f 

^^affil?3lSirttwfoSafig*»3, *JJ:U\ *r©a y*7*-*fcft#-f6. 

fs»si¥3 *iii^i-5IH!^»^t#^^l2«UTv^s 0 y y [0032] Zri£2LEr±r^±r 

-*ibissb2 24», ^■n^^affl'ffaiHrttfcsa 7-?7B-t^2 4it wtfc, ^b^aiwk 

firs. rrr% -ftic, y y-^ttt, afiss3© 40 n-f— ^27, ^y-y— 7—^26, *yh7-?<gm 

cpuimtj, /^-y*, mkaw&ii&bt*, *^ jsat2 8tfi-*SBKs*v5. 7-^70—9—^24 

^©^#^tft©t?feot<fcV\ U->ygV7P-{Ct8§oT, /<fc4Hfte»lH^ 

[ 0 0 2 7 ] XV 2 2 5 fit, T-nA-f 1 *0>m&mi& l gWtZ> l> 

»3BHrtoa«»B 3 fcMU-tHOST y [003 3] rt»feg»-^<-» 

^^ior^'3 j ? > -r<^mtrct>©-r-fc -efes, *x?vm-^2 5, jKy-y— ^-^2 

9s aflTS6«3flXV^|!:ft#UftVvJWl-eBaLfct) 6, 7, *y h«7-^*31»«2 8fc-o^ 

©•CfcS. flfilittf. Hl*#JH+*fc, *^^«!Ei9» 50 



( 6 ) 
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[0 0 3 41 *2 5J4, TWyAfJ 

^f—t'^lalSSl5 2 2 6tS»Srfr5o £fc* Affi;*J$i 

2 2 6fr*H-S-f 
[003 51 RW-f— <*2 7ft, Plt< Aftijffl 10 

/<2 7 ft, ^n/V^o3BSmirt»«)*5' b^-* 

yy-^fclfilU iSflrm^^^W 
[0036] y y-^©ffiffl^ta^H$Hfc*^x y 

y y-**JHtHB©atf> itt, # y y > 

[0 0 3 7] #y i"— y— '<2 6#, r/n^yAftffltc: 
2 2 5 fcB**ftfc*y f-*»t«Wm#K. * 
3^»L-Cff5. 

[0 0 8 8] *yh?-*tfi*«2 8tt, 7n^?A 30 
y-^ 7B-t^ 2 4 tmfefrZ. -fvU 

b !7-^IMrtWW8*»»t». 

[0 0 3 9] BLhaft^fcKWeioT, b'7-*-y- 

fcirfct, mm^^f- bV -< ^f — ^ 

n-fl-^&afcSftfcflMRK*^ ii<f^»-*H" 40 
[0040] (2) K^^Vf- ^/c-*- 

1-5. 

[0 0 4 1] !H3tt, -rjVf-Y*<<W~ MX?*—* 
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:/W*#>fe*J«Sft5Atttfj8«i 1, •fvtfjbto 

siattgtti 2^e>«fig^ttSo 

[0 0 4 2] Atolfl ltt, t^ilf-fflfS 
1 3 3 irS&8c£*l, -rA^K^fD— tf^^o-*- 
l/JSfa-fST'n/My^s' by-^iJ—tr^Sg 
M»2tiiflH-4fc»«>«IE««**r3W*v KNU MSfe 
0>*f*fcfr 0 - t <&„ I2«^S 1 2 ft, -f >• 

«iai«stsi 2 i fcf— ?x£ttfti 2 2Mi5. 

bV-V V«IE« 1 2 1 It, <f Vf — tf* 

7"d ^ b «9»BmPi^A^ bv w y-v— 7 

[0 0 4 3] ?— IfXEttffl 2214, *?v*4ir* 

^ f*-* ftfflBSB i 3 ii, ^ 
a#si 31, •fe^^y^-f^si^i 33, -y— tf^ 

lWf«l 3 2, 0-ap->*yA«{*^Kl 8 4**»*J 
[0044] Kp< ^ Vflf^a^g 13111, ▼A'f - K 

y ^ v-y— tr x -f d - i & l gmM& bi-ZJo'U 
^©ilfflta»-6it-5^v— >3>-trffiWU bV 
4 y«M l 2 l Kp£ W >HMtflni«r9A, ■ 

ijK?i-5^sg*«#i-5. ^/^bv^^-y— ^ 

<< >®m >HMMf »« l 3 1 K> v 
tifiStlHtigRl 2 1KBW6. 
[004 5] ***!)f-ffl¥ai 3 3tt, TA^K 
^yt-f/^B-*-l«^5^-> b!7-^ 

•y— K*<gwmm2 fc«««*«St«l!:»WM»t* 
flru -fedf-Ly^^ta^ai 3 3icio-c^iE§tt7t 

[0 0 4 6] -y— Kxtm&Wtl 3 211 fr^B/V^ 
t>©T?*>5. ^WP^^Aiifll^ai 3 4 ft, ^A-f-b* 

^-^^-y— W^B-*-l t#^B/^^7 bC 

[0047] s^t^igpjosi^tov^-cra-rso *is 
-^-l^a^-rs^ii-^ox, -v^K^-^^f-* 
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[004 8] 3fc3SW0>-v7l'f- hV Vi-MJS tfcii-ff f- 
(T) "9— tf^SMSPts 

[0 0 4 9] (T) 

JSC*!), t/U^K;*^ vf— trx^a-*-i-ctt, 
[00 50] ^if-e^a^^Mat-o^TH-^ 
***** ^o/cranWjwuPMXS 

[0 0 5 i] *fc> ***ofl5«-cr4; 

[00 5 2] -v^hV^Vf— f^^n-*-ll±, 

^wsf^y *a 134^ u-c, #^n/w 
issaai 2ot?ot-^««ii 2 

2 t Kjt-f >S^IEtfeSE 1 2 1 tcflHrtLTJK 0 
[00 53] KlCkE*"**:*- IT^IMMW©*^* 

[0054] £-f> -jgoitif^rofifri-^s' M7-*t— 

1 i ^mmmmm <r>^*v*y* >*m& u 

*y Ky-^f— ^i : s3ie2Es-fe*^y7 i ^ta^ 

[0055] mmv&teib**-*^***- a 

***** ^P^^AKfflfl^^&ttire 
fc3K>^*#*A#*"* (^f^Al) 
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#&2 3 3tr^-t-C^^K^^ VU— tf^^a-*- 

1 KmmZfrZ (x?y?A2) , 
[00 5 6] -^/^K^-O-f— **:/P-#-ltt. 

^SSi^x 134^ ***«u K 

»£. **ib©*«*:*ft«is 1h- ***«««* l 

2 2 t -f 1 2 1 5 (*r y 7 s 
A5) . 

10 [0 0 5 7] i5Lt, ^Vf-K^-fV^— tf^^O- 

<$mmm*t> H>-f :✓*«, *-**i#**ik*u ft 
[00 58] w) 

Jfcfc* **#^~©*^ft3Mrfr-**©*#fc*>fc. 

awwwiiiof— ****■*-*■*— 

tf ^-MMWlWiofc vt BHH-+--5 . 
[0 0 5 9] rot-^MWilt 

[0060] rr-ev\5, ^w^/KO-fritfcov^ 

m*<0^7*-?lZ-£-o TiSffff — fc*^ ©*K*r»*t 

©iSjVMlIt3^/K fci*.tf» GOLD, SILVE 
R, BRONZEiV^W^ 

D) *^^^iC 0 ° B H%Jg^$*S# 
[0 0 6 1] ioT, ^^^-rtioTS^^flSfiS 

[0 0 6 2] *v~¥x&%®>w<DWimz.^xmmz. 

A^-TS. A*£ftfc1f-fc**fi^tt> ^SU^^AJi 
50 ffift2 3 3lr^Lt, ^vf-^^yf-f^o- 



( 8 ) 



4#R5 2001-282760 



staw-Yi'iD *m%-tz>, 

[0 0 6 3] -v/^K^-f ytf— tf^B-*- 
•Y V«fi8flf««r K^W V*^|5«SB 1 2 1 *»6«*ffl 

S„ 10 
[0064] j&**rg« Lfc* v vy~9^~ If *tfS 
SHItefcvvc, K^-Y vtf— tr^^n-*- 1. a> 

IS® 2 l fcttffil/t?— tr* U"<A^»***#«^n 
-*-2 3(^^1-5,, d©t*, ^©f— tr*w^ 
MWtt, * y b v-t f — fcr**as» 2 ©*H&-> 
*1Pi»aflr»2 3 3*:#L-C, -v/^ K^-f Vf— trx 
;/b-#- 1 a»6»*3JT,fc*S 

-cif— K'^v^v^s^a^i^stbs. ELh©*« 20 
[0 0 6 5] i©*«fflf«fcri, nwmtzwm 

pgSrB-®fi.St*ii«-9— tf*£«flH-3fc*©&t> ft 
[0 0 6 6] jWn, H5*#J»Utf— ^*5t«f»«r 

So 

[0 0 6 7] ^vsUrAiDX'iU-fi asm. *^ 
-9 A) tt> Affl*S«2 lfcflvvrf— tf*l"</l^ 

A«ff SB 2 3 3lrftt, tA^ -i* ^U— If* 

[0 0 6 8] v/vf HV-i'yf- tf^^n— itfs-tf- 40 
-tf*ffr?t&g:{|-f St, f— lf*«8SBl 3 2^t— 
fc**!H« 1 2 2 trWR UT, jM*ft»J6i-5 K> 4 V 

[0 0 6 9] ^L-C, Kp«>fi4MrtWlBlSllt, K 

e««i2i«»6a#t5. set, ^/v^k^^>u— 

tf *;/p--#- l fit, ft-®i<'Xy L J*MiSn 13 4 

•C, yn/q^A©S«7'ci-A-2 3 «?^^ 
-f vflW**S«1-a Affl*igg2 l ~tH*+ 50 



K^-fVB) MB^SfrC (?7^B3) . 
[0 0 7 0it^^Att, K^VBSrSBtl/C, 

fAIfffg2 3 3Sr^bt x T'u/^^'BO^T'n 
-*-2 3 (£11$. i«yo-*-B) fcjgtiTSftS 
^?5-^B4) „ 

[0071] fc*ru cHfeH^^&StoMrR:** 

^D-A-AI4Sl/a-*-BifI«M03 
[0 0 7 2] »^B-*-BJ8**-tf*l'K**»» 

^^aa52 3 1 f— e^w^MttM 

B) 1h-tf;*^^-&jtffi1IS&2 2 l^^hV-f^ 

fcf— lfx-MMHSt-J— tf* i"«A4tBl»Bi:l 
fft-fS Uf^BS) . 
[0 0 7 3] #*:7n-*-AiWS:*fc»8Lt\ f— 

6) . 

[0 0 7 4] &.±<»9mK.X9. ^B/^^Ai^nA 

§hs„ ^i:«fift«:> ti£jeiRi-«a«»Sv ni«u f- 

[0 0 7 5] (!» tf^^BtTi>a=y^«« 
M/n^^y^ *^^^^t,cD^-lf^d-- 

^ts<5v^T, &m<D?us<s(9'<ommMMZfn.it 
%x9-?im<r>v—*x*mmtzits>, m&w®.\c% 

[0 0 7 6] rcof— tfX^Bt'^g=>-^^i:« s 

[0 0 7 7] rtu?>©f— ^P^riifff— f^«*©fc 

^7P-t-/<2 4t'l>^ ^K^'f 

f— h'^<B : a^S2rtfC&S^^ ; ?^>-rf— ^2 5, 

sam-^— 2 7 , 3i?y->— f— ^2 e s y—9yu—f 
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w< 2 4 -frS<0#, ?-?7P-t- 

[oo7 8j -r*frfc, f— i***- ^«sattt, 

jfrv-JrT^— /<2 5f-i3V' > X> #*:^ii»&D— K'*3i" 
-Y^©affl»a«rt»o*s' ^ y y-* 

5SW-f— ^ 2 7 {c*JV»-C, iiffislSlw^^ &/S8f 
^a-y^lills *y ~>~ 9— ^2 6\CHoXm 

^ 3 fc» urff 5 *»Maa*rv* 5 . 

[0 0 7 9] SITC VX'fWSns-i'MHz 

[0 0 sol *-f> vx*— ^ai-ssv-'-c, 

* -tJ— If* « 2 <D Atil^g 2 1 fcffiffi LX * * 
^^ T ^- / <2 5fcS®£fr5. TRfe***^^* 

§52 2 6 fctEttt*. 

to 0 8 1 j &fc, hHtnaww^ vbh* 
4 #<r>mm < §mmMz.&^x, mmmt^o^^WrU 

1 0 0 8 2 ] *T , W b R1t*i-<5 

[0083] ~?fr°?-Y*<< y-v— nx-fv—n—i&v 

^ W VM©A— bK*Hfc*fTU jSflttW*-?- F*-f V 

[0084] mhh- * 2 7 #K***iftMra 

2 7 ^jS^fi 1 tfc K^'f ffiA™- b$!f)-£>*S*«u y 
V -*!H«B 224t>#y v—fEW 2 2 5 

[0 0 8 51 9y-*B**2 2 4K:H\ 

-rs, # y v—iaw 225 1«> ^yM?-^ ft^s 
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[0 0 8 61 JSfelC, S«ya-*-2 3 0t-^V< 

/^3t^a^2 3 m f— tr^^/v^lEW2 
[0 0 8 7] jR*-e#s»a\ 

10 SK^^*^d-*-1^- ^ B ^ 3 = 
[0 0 8 81 WfcY*'<-y<n i ®%fc7v--t}-2\±V- fcf 
y©*y H7-*+-«W««iBfr»— ^2 7*5 

WW*. 

[0 0 8 91 fcfc, W»H^-f^©«f«^n-*-2 
-tf^7'i3tre>B=i^JS»*raMti-*. £5 L/C, f- 

[00 9 0] %=.<r>zfnv , J*^'yy®MV-$$^x^ h 

jKV /<2 6t4f— tfx&&ft1-Sfc*£>aftSs 

g3-e? = >-7^^V-i/3y7 s -iS i 'Sr#y 

30 -Cfc5o 

[009 ll?CC, ««^o-*-2t±, K^^V»^ 
iatS?C2 2 2*»MM~ tfXfc««i-Sfc»K8*i-5 

[0 0 9 2] |»K^'f>'Off*/P-*-2*t-^ 
th- /<2 6!9«, Kf— t'*©#y V— 

40 ©sffl^sW'?, -9— tr^^H^-rsa^esi^ 

u-ct'b iota -yy&gftirs, 

[0 0 9 3] ^.K. WfiK^-f y©««^"-*-.2 3 
[0 0 9 4] #«^n-*-2 3a»M»K^-<y*»5>f- 

«**tu fttoK^'fy^tfciiffit- 

[0095]^ ±ia^a«rii 6 , 7 «r#jf ltd— 
so ¥*7vi?i?a-ymmc<>^x?i$M\zMmi-z« s 
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[0 0 9 61 metoyo— ?-^— hc&v^t, »©^ 

(^TyT'Cl) ft»*^n-*-2 3, *fcii, 7- 
[0 0 9 7] *fc, t«0*H»7*!7-Kjfeft* 
Uf'/7'C5) , f— ^^BfS^as^J&SaSft 10 

Uf5-^C4) , tr* 7*n trs? a = ^l&jifi 

(775-^C7) f*, »«7*n-;b-2 3*Sfr5«!>ST? 
[009 8} b*/4^m*-VW>ft 0*7^7*0 8) 

10) K^'f^rt/v-HS: 20 

tt (^y^Cll).ttKIH—^2 7, /n^3 = 

(^T->yC12) tt#ys^-*-/<2 6**jve 

[0 0 9 9] W a 

[0 10 0] #**N'f*7*n/V*'Afc:#l/r 
#fi»J-ett, *^^v»E, J&^^^D, 30 

©?— \:*iri* % 

[0 10 1] KT©^fC*5V^-C, ^B^-f^AlCjSVN 
X, gftttttfcf— tr*:*— y-toV>tT*f bV-f 

Wc, El 2, 3 mx-ft^itmrfi i H3-© <fe ©"?*> 5 

[0102] /D^yAi:*s^t, SitftHtfelh-tf 40 
ffifCA^^^Tf— ^2 5A{cS®rf5„ 

v^§£\ f— fcr*isf6$ 2 2 6 Atciyfii-s (06© 

^yT'C 1 0) . f-W«t*Ac c e p t 

edtLtMtS (17C«D1) . 
[0 10 3] !7-#7n-t-^2 4AJC*JV»T 

[0104] 1^7* 17- Kft*3£r±, B 9 5 
{Cf— tr^E«»2 2 6Afc»«S*b»'?— 50 
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X'frZo ill OS, *|.«7*!7-^-f ^jfeifc^n^y 
^©3c-t"ifc5„ Hllli, rt«BK^'fV7*!7—r-f y 

[0 10 5] 7*!7-KjfcifcSB^s/*T?fi, f— IfX 
4MB. *^v-^a>-Jt*. ^-^*«fltfSfc»© 

fcf— ^^©ft^stfa^^ K*-fVl*|A'-l*Rth 
f--tf*7*nfcr^3=y;/©7fc||fi\ $5ik £&®<Dft 

M&t>frz>. rn?>©^M{4j3©te©f— /<-e^a-r5 

fe©-?&£^, SIMMS' t*x«=^grt 
SrlSit, *5©*5©©U— ;<-frb. ]»li#*t54^ #H 

[0106] *fc, K^-f>-iS^-e©te®(4, y-x 
vfcH#JB&ft5. y-*Ky-fv», *x^-^©y- 

K/l'hV'CVtt, y— x K^'fyir^f^^iVa V 
©y-^^y h7— *£iBU&U ^c/qffl»7 

[0 10 7] *fc, v-g ^SCtt, Un d e 

fiend, OK, NG#*S. Unde f i end!4 
i/aV5te*ff> O K is b >$m, N 

[0 10 8] 4, !7— ^7B- if— ^2 4 Afciart^ 

X Fy^vrfc9, K t-ati#Ac c e p t 
edtfeO, Ky -f ^H^— h ^*^ftt?&5S 

f\-m^X?^%m%®-f (a^-y^Ll) «, 

^TOg-b— /<-^©#l-gR^**^LT^5©-C, ■/ 
n/W^A©l7— ^7B- 9"— /<2 4 A*»e>W7*B- 
#-2 3A~4!yg;85&3o 
[0 10 9] *fc. «7'B-A"2 3AX'lt Mir 
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^5 (b^L11).o*9, «tWfAM 

[0 110] v*fF^>t-^^-*- 

8). K^'fvMA— h»fH4» Kj»-fv«MMM*« 
1 3 1 i f — 13 2iS ^ >«^IH« 

12 1, ^-ir;Mt*E«ttl 2 2t#»U» 

•rs. 

[0 111] Cit, K*^ ^^o^ 

[0 112] W:, yp/qn©ff^P-*-2 3 

y-efeO, ^o, t-WW'Ac ceptedTffc 

AJghOV— ? 7n- f— 4 A^*Bs&AM£5. 
[0 113]W:> ?-^7D-f-/<2 4Ai»lW7 

c e p t e d Xh 9 , -f VRSJ/l— h iSjSRtt- 

d e f i n e dt$>5«t> h'tJ^fHfr- hKSt^M 
a**&S (Bi?^L3 1) . 7 

SrRtH-* Wy^ci i) . 

[oii4] ww— /< 2 7 tmnvit -r ^rt*- 

>Kff®S*f*> yy-*fei&g|32 2 4i:5#>Ji'-fBlf 

SP2 2 5t*tii*tV5„ y y-^IE»2 2 4 ICS, 

*HN»ttaH-*. 1 0Mb p s co«£#1" 

5?y^i^t, 1. 5Mbps«WWfc^ 
«f»|tl. 5Mb p 5 SXfci:*, 3. 0 

Mbps©!)y-^oat:**i4s. #y->-ie 

«gj5 2 2 5 Ctt, * V ^ !7-* 3 

[0 115] 7'n/<^^A©!7-^7P-t-' < 
24A^K^^y©F*3«-7^-!7-K5fe^t: : fT5 C*^ 
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fc-*:W§;$5 Intra domain Allocat 

yK^y*t©f-^t» ! Unde f i.nedt 

3) „ oil), ^r«^i3-*- 2 3 h^imfr®** 
[0 116] 2 3 Atf5«-S7;f- 57 

W y^t-S F^W ^*"t*©-9— VT^«»# Intra 
10 domain A 1 located T?& tU iS»O s 

XfliiiUndef inedfWOf,7l-*vr>3 

2^ x*ry7c 5) „ 

[0 117] 7B^yAflPfi 
W^ffifg2 3 1All f~ VXV<A4t 

M^muz 2 l A^iU^ **#T©K*-*-«ir~ 

20 fXfiWs ^B/W^At^ny<^^Bi»IBTf^-* 
Lfcf— tr^CiBUSt?* s y^i"*. ft* 

2 33ASr^U« ^P/^^Bfflff7'P-*-2 3 

#&3£{f-f£ (^y7C6) . 
[0 118] ^7*B-*-2 3B!iSt- tf^yntTi? 

WftPAc c e p t e d-CfcO, V 
3 yg0Un define d F^ggi*-*^ 

[0.119] 7-^7P"t"^2 4Bi ! , rtgB 

40 >iI#Un defined -CfcSWT?, K ^ 'f 

[0 12 0] 7B!W***lfc«t 
/CI 1) , r7-^7B— ^- /<2 4B^&3l&# i i-f 
[0 12 11*^ P^7P-fw<2 4Bft ft^t- 

[0122]^, gw^yi!y^Kwy?4<. 

ir^-XO HV'f V©f— tf^!|*li* s Intra 
SO domain Al 1 o c a t e dT?*>5©t, »SPV 



21 

[0 12 3] »*^n-*-2»B#, #M»7* 

7-K&»£p^y*&*fH"5 (*:r>y7°C2) „ 

3 Brt© Ff l$i:2 3 2 

[0 12 4] Sr«t^P-*-2 8AWHIWfA»| 
1) . 

[0125] *mmm<om&, § -y 

Intra domain Allocated 20 

6) o f«yu-#-2 3AO|»J»^f AI 

ft^a&^-L-C, !7-#7B- 9— ^2 4Afc*0s&;&M£ 

[0 12 6]?feiC, !7-?7D-tw'!2 4AW5'V 
p-jjrf— f^aSI11|¥2A(D^-e«3rtlfS7d-!7-K 

^ -Y V"Cfc 9 , i-^T©K/"f>'©f--^* 
ftflBfl* Intra domain Allocated 

i?5,i?L3 2) . 0^19, /^26A^M3S 
jWfiMfSft*. r©iS, WID* ! V 
^7B-f- /<2 4 A^6^y ^2 6 A~® 

[0 12 7] #yS"- S-^2 6Attt- tf*ID&* 

y7^V->a^T-^^!) ~>"fait952 2 5AA^ 

e>«*ffl-r. fiu *y 2 

[oi28] y v—x-;? *a« m. 

fit© 3 y 7 ^ I'-f 3 yf-^ !:» fC, -fv 
i*V a -is? (^^C12) . 

KiJ:o-c»*5*«. *y ^*W*MHMBW*tt* 

[0129] tot, # y f — * y -y— 

t«is @W^^t-^»Intr 8 do 50 
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main Al located *»b Provision 

fc s g KV'f f07'B^a=V^l^-^3y©f 

[0 13 0] *J'/-f-^26A^P^as^ 
&m?tZk, !7-^7n-t^2 4A-M« 

1) 0 &MM&i<0ffi&~. y— * K^^VA»6>S K^^v 
©f— tr^tt^P r o v i s i o n e d"CfeD, ;&» 

©t-tf^Wlntra domain Alio 
ca tedtfeO, ^oTSIK^-l'y©^^— ~>3 > 
WUn d e f i n e df^flt, ^SEv^^i^ 

B -fw<2 4 A^f>W7B^-2 3 A^feWi 

[0 1 3 1] gfcic:, »«^n-*-2 3Afi. K^f 

fiUntra domain Allocatedt 
(B'^?L2 3) . 

[0132] st7B-*-2 3Aii, vtjym&n 

^Affllfflf SIS i: T'n/W ^ B ©Ifflf lffl©l 
2 3BlC#tX»a^ti-5fcfe©^-^7 e n^ 

6) . 

[0 13 3] f«7 , B-*-23BA5t-W7'Bfi? 

7) , ^t-?«»^!>t-*k«^fxy 
[0 13 4] K0T»*^*ft\ rtfl-7*!7--K*S:£© 

P r o v i s i o n e d -CfctK *»^. § hVW 
f^f-f^^a^F^>SWt-lfxttiSI n 
tra Domain Al 1 oca tedt*9, i> 

O, | Kp<-<y©-7 0 B!lfv?3=y^©*-<l/-i>-3>^ 

lOTn d e f i n e dT'&S©"^ rtSE^^A^ 

J*mm^m 2 3 5^Ut?-^7B-t^24B- 

[0 13 5] RC, 7-^7P-f-^24Btt,4y 
h ry-^f— tf^ta»S»B©^«B7*!7- KJtefcJE 
PS?y^*3WH-« (^^Cg) . 
[0 13 6] W-f^bi* 
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K/-f>"©f— WWWP rovisiotedtfc 

$tf©t-^*M|giJ$Intra domain Al 
locate dT?&<5, ri*0, @ K^^V(O^U--> 
a y*t*^U nd'ef ined -CfcS©-e, #C©*fi3lfi 

[0 13 7] jKD V- f— ^2 6 Bf4, f—br* I DSr 
|$2 2 5B^e,Sl^ffl-fo fcfc, /P^^BOlfflff 

»Prov i s i oned£S!L-C, t7-^7n 

— 2 4 B^a^^-r 5« 

[0 13 8] fltfc, ^n/W^B«)!7-^7n-t- /< 
2 4Bf4s W'7^7-K5fc^C!^5'^*#fi ! r2. 
(XTyT-Cl) . #ISifc0lJ©*#£\ ^v^K^^V, 

-twK^-f K'xftWi&P r o v i s i one d 

■?&£©t\ «^fA^M*ff^^5 

y n - b ^mm 1 ® £ ti 5 <. 

[0 1 3 9] m®-?o-*-2 3Bfi, ?-^7n-f 
w?2 4B^f>(D^S'-fe-^^f-fSi:s 
-K5fe*^ni>y^^#fTi-5 (^fy7'C2) . 

-t-^T© K> <f ^©f— trx^jSasp rovisi 
[0 14 0]ff«^B-*-2SBH, K^Vfcjfce 

f«^o-*-Bli, *»f;*^A«M*2 3 3H 

[0 14 1] S^p-*-2 3A#tft/n-#-B 

g{§-f3i (^fy7'C4) , ft^7tP- K5fc^a 
i^***?^* (^fyT'Cl) . *3WW!I©1M\ 

visione d-Cfo5©-e, rt^-^T 1 A'vfeS* 5 ^ 
ff£H* (ni>yniO) . o*9, W/O-*- 

[0142] 7-^7B- 24 AttftSRK 



13) #120 0 1 -2 8 27 6 0 

24 

C9) . e K^yisy-^K^y 

■^^L3 4) . 

[0 14 3]»±OJ:5C, ~7<a**.>(?K<0*y M7- 
^f— f^«aSHt»2Ai7'o/W^B©*s' 

10 t^tftSCtiaot, ^©K^-Y^&^UfcaS^S 
[0 14 4] 

mw<0%}&l *»W©8-©3b*tt> HftS^B^ 
-*-M©B*i^Sff©^ y*-s>ag(HcJ: 9, ««© 

[0145] %-(D%)m*. **9-*>rr*i—'\ #y 

7 b -t-A©->^7- a ^ yx 3 vr 

y^sS^-tffce^-e&S. ^©Jl&tt, S45/b^ 

y t©-T 7*-*as#£«*7n-:* *-©##*■ 
1-5ttKJ:!» % ±IH©f— S^n- 

30 [0 14 6] ®Z©$*i4, %X9-*?>rTV—'\ 

[0147] ^eg©^mt±> *^#-piioy-^*y h 

>-<y-7— f*:/n-;*r-# v JMJt-fS^xwK^^v 
©■^-tfxws^fa-rsrtt-j:?), g*^ttfcy- 

h7-^A>fif^r^^y3y^y M7— ^* 

naffi©^m*ift^] 

[n 1 j -v^^ -< y h E7-i? ©«ia-efc2.o 
[021 hy-^-^-tr^tiil^Sw^tMytB ^ 

50 y^SI-CfeS. 
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(57) mm 

5? a -A- (I Ml, IM2) i\ lo^fcligtOi- 
iflh-tf^^t?^-^ (USM) &<Sr£t?. 

*t«, r-^-tr^fa*^^-^ (usm) ©fc* 

©lo*fc{4»(D^— if^UfVy 1 —- yg^® (C 
P) (f) 



R6-2 



0SF2 



]t H[ t[ 



LjJSM 



A- (I Ml, IM2) 10|fctt»03. 
-Iff— tr**5>»— /V- (USM) t Sr-ttf WKIfl* 

-tf^ta^^a.-ZV' (USM) CDfcft© 1 o£fcte« 

^£D^--1f7*^V"r— ixa yjg (CP) Srihtf-bt- 
5©f:lUfc-f^-7x-^ (f) ^WyYVx. 

*7 J? if^Hfyr-^a vS^rf-jK-M- 
3^y*-7*-* (f) iflWffa*^*-*- (OS 

f) t<nm\cmm (om) ^tfrt^mii-s® 

[lt^«2] #;frS (OM) ^, GDMO/ASN. 

I Pt, CORBA*fcttIDLm@t£<J<iSa*^ 
W-ht5CORBAf^yoi?-llS<5<7 , n h 

^ a, t <n> ®otm& WtgJc-t 5 C <b it5 8**S 

fJM&S] ffcfWB (OM) 555, »fcGDMOtRO 
iS&*©fcfc© t-'-f ^©ilii^, ASN. 

A. 

rs c t * fc i-si*** i * *:« 2 
(om) Rua*3aa*t*ri*WKtr5i»*«4fcE 

f— ir^a^a.— A (USM) JciSWitUi-S r. 4 
t i" * M** 5 t£|E«©m*iIfI* -7 h 7 - 9 1 

aiAX-rA, 

Ht#*7] ^v*-?^-* (f) 

57-f?^^-7s-? (G) 4, 

p^mhs (s) t, 

(AR) fcfcf-#-bir5Cf:tr»«frSl» 

[0001] 
[00 02] 

t 4 *^riBKii-*^- K * *t«*4 y?h^ 



2 

srieatfrtrs' H£<fc^T*ja&ft$c4£«£i5:ftfc 
i\ rftfc©St«4 L-Cf*, 

[0 0 0 3] #3PJ&, fcP>^3*^:/©II££fcS3:^ 
[0004] KTwWt?it 4 1> fetf, r^i^-i 

3 ywfAj (os) tv^awfctoxtjafejfr 

^yh SrtSL-^-rs - 4 *-5T^iw-f 

5. 

[0005] MM*? M7~^©*a*V^tt N 5 

o<omm-7*y? f, a, c, p, st, *-4*>-&n« 

[0 0 0 6] IFS-tr^i, mUt*y F7-^@ft(c» 
20 LrtfTA'^-Y AT?«*>*vn. tfa-fci^tt, «ISl^Sr 

[0007] ta-fey^ o s i*ftfflflr* ? i- © 

5. i-^-c©#fe-«, Mi*<3ite>^fc->y-Xi:Xi: 
30 *^ttMlfc5'y-XKJ:oTfc|*iS*l/0^5. Mf<> 

-x», mmxiftmmi'ffi-fz t>©-e& >> , x->y-x 
ft, ii«r x« h a/i^^ yyy ^ y^-v* 

[0 0 0 8] TMN («BHfl*?f7- 

• : Telecommunication Management Network) 4£<3it 
ibttfca McoV>Tifi^ ;; "CV' l 5 I TU — T M3 

XiitS, TMNtt, mxoT 4 &i'4-7<0®m j £y 
[0 0 0 9] 

♦OSF ( r^U-: y 3 y-^fAlilj ) 
•WSF ( r^-^^^-v^ay^ltlj ) 

• MF ( ffWh msg) 

• qaf ( ror^^aiBj ) 

• NEF ( 1"*;, h!7-^g*«j ) 
S. 

50 [0 0 10] WHr^tt**. OSFltiWSFi 



( 3 ) 

3 

IBfcio-C, «t««K«Wt**l-CV^*. OSFlltt, 
*. WSF|», M^Ufyf-v'a v«tg 
[ooii] r*T,p>co-T'<T©«IS6-fes' Hi, -rv*- 
-5„ Pil(tSW-J:tifi, f 9 -y 9-7 

«, WSF^-l'7 B C0^«|-feS'>trMF*3j;t)«OSF^'r 
:7^$tB*y Hd^L-T^S, q 3 947* < b'i y9— 
7i"Xtt, o$V9'C7<r>Wmty hioSF, M 10 
F, QAF&£tfNF^7 P ©$litg-fe:y hk<Dmmz*i 
HBKl-fS. q x^r/©^*-?.*-*!*, M 

F^iB-fe-y l^irMF, QAFSoit^NF^-f 7°©$litg-fe 

[0 0 12] x, q*S£tfm-f 

OSF, WSFfc^yQAFty hi^OTMN© 

*as i ©aft iriBtt- s. 
[0013] ( r q y7ri'^#'f^H HfftfH 

■SBtei^-cjeftsnrv^. £v*5©tt, ts&fts 20 

Xhti. r©fBSSKf§ii, GDMO ( TGuideline for 
the Definition of Managed ObjeotsJ ) 'BWX'hZ* 

f-: ?©£*lt-Ot^Ti2, ASN. 1 ( TAbstrac 
t Syntax Notation 1J ) mBftm^btlX^^o 
[0 0 14] f^y^-7i-^H0V^t4, SiJ'&tt- 

[0 0 1 51 *fc, SS»»«H;, a-Wy?-7i 
-^tMB (WSF) i:<i^y9-y^~-Mz.wm^< 30 

[00 16] tEilf, q-fy?-7x^tt, WSF 
Safes' h©»— tf (^V— T'Ufyf-Va > 

[0 0 17] tf-^V— >9-7*'-X*<l<{ ^9- 

[0018]- q-^V^— 7*-^Ki3»tS^/S>x 
* K©€*i^^*^ h»*aw**±©Wfc9 3WI« 40 

[0 0 19] - WSFHMBtf, S/^fA{c^BB»JC* 

nmx*i*to\ 

[0 0 2 0] TMN ( fTelecommunication Management 
NetworkJ ) ©T-*y**-*©J£*«fc I TU-T 50 
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[0 0 2 1] TMN7-*r^ft CS<5 < Sli'^f 

•cvvfcv\ ifV y^^x-xfc jfcfcjfitfcj: 3 

fc» GDMO/ASN. lfftE*$M^>^-7 
a-xfciISaB8K**fCi3 9. Lfc#:oT±i£©&/S£ 
WLTV*. q-f >-^"7^-^i©M 

M7^>f->3y|J:«o, o s F$if£©f&# £ 

*>fct>i" ( l"User Management System] M) If V 
?-7x-?*i> 3 -/WSMOTt5iJWfc5, 
[0 0 2 2] 

[»W*s#*tJ:5ii-5WH] #35W*i*te>©&£ 
[0 0 2 3] 

[SSSrSI*i-5fc»©^©] *ofc»» *»Wtt, J: 

o i okfctt**©* s/ h 

^i>^-A>fc, lo£fcr*m3&©a-iff-- 
i/3.—;u<Dtz$>(D l oSfefitWR©*-- f T^WfyT 1 - 

^t?y7 h?xrr- sfr^ $r&tf-t> *fcv7 
[0024] m*saflMfa* ? 1-7- 

9 TMWCO l 4 >9—7 ^-MZfa^-tZffiBL-l >9— 
7i-^«5, »*L<{±, a— iff— f^fa^J?^.- 
>VU SM (User Service Manager) iC2*A&*v3. 
[0 0 2 5] r©^y^-7x-^», fyt-CWT'V-t? 

=efMi, iy^AfcioTf^ftS^TMTV© 
*M&*mfcH«UT^6. z.<r>i 4>9-7=--*b<i 
4V9-7*.-*t<omc.tt., *-Ott*^7 h>>x7 
Jiff, Rtte>*V5iifcK» t«T»a-f/Wfff 

[0 0 2 6] #3PJ1©^©te©^&£tffiJ,6ti\ ^# 
©EI&#ISU*i&s&. '#pgj£ttftfi8Jfc LT*1-£IT©SS 

[00 2 7] 

h9-9^m^M^^^—^iMnt, V77i/yx# 
4^bq {-rtit>h%\^m^it q-(y9-7*- 
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[0 0 2 8] itl,e>©20©fi ; E'v'3.-;HMl t I 
[0 0 2 9] £fc, a.-- 

[0 0 3 0] #»WKJ:ii«, fcfc'ffXLfcat&A^ 
a— iff— fcfxl?S' ! &i ? a"/HJ SM©feft» 1 

3, 

[0 0 3 1] y7^x77-3ff^f-tlt a— fT' 
t^^-i/a^JiCP&f tf-hLTV^ f -Yv*- 
7s^i, a— iff— K-^^S^^a-Zl'USMitft 

ttSftr^aflHMfwes?.-* I mi fcroiBfcfMNB 

[0 0 3 2)»it f^*-?*-*}*. TMN 
*•/ ^-^|»Jtlt^5 f 

fgSLTfci?, fcixti, y7H>xT*y»-*us 20 

'MS Sit* ^W^f/M*. ^*y^££oTf?S£:}"b5^ 

i/^ ^ y w <Dfm&mmm vx ^ 5. 

[00 3 3] :»f-f^-7x-^in'f^-7i 

f7Vfyr->9V ; E-^a-yl' (JSSitftt rpresenta 
tionHandlerJ ) (CioT^W &*t5<, 
[0034] H3tt*»Wfc**y7 F?x77-*t 
f ^ £ £ 9 LtcmXhZo 02 30 

5. 

[0 0 3 5] V?—7 ^—XfrbV)ffim±, 1tk%. 
fcf s T'n b^yVCMI P (Common Management Informat 
ion Protocol) tCfcofiHiK,, #iF OT>io 

C0#^-eS)-5GDMO/ASN. 1 if«H5fStf 
oX^MtZtl, #^JiOMfcJ:oT*H-»6Jh.*. 

[0036]Mi©Wtltt> iroqv/^-7i 

[0 0 3 7] 2, 3iV>5#JH#*3*f+3avC^ 40 

fcf— * F M^r^f ;VQM(cf} 9 6 C i 

[0 0 3 8] W^MfcoVvCtt, W-y4»4, f-O" 
*jSW©3ft»»»«J:J:*iHt, *itt*CORBA*fcliC 50 
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ORB A— I DL ( flnterface Description Languag 
ej ) x^/Pi>-!c£<5<iff»^mT-%J:<, C + + 

[0 0 3 9] LfcaSoT, ttMOMIl, 

[0 0 4 0] fciittf, MiOMIi, 7dF=;>CM 
I Pi, I I O P7°f h=i/Vtfc(40MG ( fOpen Man 
agement Group J ) izXoXfe&ZfrltCOR&AfJ 

BB©fi^*ff ? w i -6. 
[004 1] -e©fci6, tt^IOMtt, GDMOfg© 

[0 0 4 2] f-c^-7x-xa, a^-fyoa- 
[0043] -mfcjeftfcintf. ^-fWi?>T- 

[0 0 4 4] »l©»t9BtSfc±*t,tf, ^.-f-VUify-T 1 
B3fca*S*vXV^5J:5ti».— iff— tr 

[004 5] H*S*tTV^*tt»*fcJ:fttf. f-fV 
?-7i-Xi±, Tffia-fTV-tfVT 1 --- V3>I*f 

[0046]- WWh?'77^-^-l'>?"7x 

7^M£<g*£;M:^5^0ifr^FS 2tr, »— fas 

fiat's** y 7" M1&S- Ht/DFsA'IIOP 

hT^P*-— i/3^>.07i"fe^AR*t, F-Of— 

[0 0 4 7] *fc, ♦WMOMt, PJfy^^wv 
P_Lo g^©y^«rtfao-*N&::fct>-e#S, 

[0048] 8iraUfcy7M)x77^f?f+ 

ii, a— iff-tf^ronsfellfa^^^-^usMroJi 

[01] 5- M7-> (TMN) O^tl-fe 

[03] imWl\^$.%-J7 W^TT-*??^^ 

mmxhz. 

CP s-fVu-tfy^-i/aVS 



F f^y?-7i-^ 

1M2U IM2 H^-^flHS^a*^*-^ 

ne *vhy-?mm 

OM fHM 

[HI] 

FIGJ 




OSF 1, OSF 2 > 
usm 3.— f^fS!^*— 



2000-92059 

Wf« (tt 



[H2l 

FiG-2 



.^d 0SF1 



T" 

OSF 2 



fivy C0RBA/1OL | 





\ 


— r 

G 


■ s ■ 

A 


AR | 













, USH 



